Login scripts not running

[Daniel Grund]

Hi NG,

if I add a loginscript to the default domain policy it does not run.

However, adding the _same_ script to another GP, bound to the OU1 one level
deeper, it works.

The user logging in is located at \\Domain\Ou1\Ou2. Ou2 has no GP bound to
it. CMD is allowed in both GPs. Moreover, I enabled 'Show Login Scripts'
under UserConfig\AdmTempl\System\Login/Logout\ in the DefDomPol, but this
doesn't work either; neither for the script in the DefDomGP nor for the
script in Ou1-GP.

The scripts reside in correct places
SYSVOL\Domain\Policies\{...X...}\user\scripts\logon, with X in DefDom-GP or
the OU-GP.

Wondering if this is 'by design'???


Any help greatly appreciated
Daniel Grund

 

[Dmitry Korolyov]

Not by design. Looks like you have blocked group policy inheritance at some OU level. Try to use gpresult or rsop to find out which policies actually being applied to the user in question and which of them are being filtered.

--
Dmitry Korolyov [[email protected]]
MVP: Windows Server - Active Directory


Hi NG,

if I add a loginscript to the default domain policy it does not run.

However, adding the _same_ script to another GP, bound to the OU1 one level
deeper, it works.

The user logging in is located at \\Domain\Ou1\Ou2. Ou2 has no GP bound to
it. CMD is allowed in both GPs. Moreover, I enabled 'Show Login Scripts'
under UserConfig\AdmTempl\System\Login/Logout\ in the DefDomPol, but this
doesn't work either; neither for the script in the DefDomGP nor for the
script in Ou1-GP.

The scripts reside in correct places
SYSVOL\Domain\Policies\{...X...}\user\scripts\logon, with X in DefDom-GP or
the OU-GP.

Wondering if this is 'by design'???


Any help greatly appreciated
Daniel Grund