Announcement

Collapse
No announcement yet.

Weird problem with policies/login script after migration (SBS2K3 -> Win2008)

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Weird problem with policies/login script after migration (SBS2K3 -> Win2008)

    Hello,

    I'm encoutering a weird problem after a migration, which was completed 2 weeks ago.
    The migration was from Windows SBS 2003 (singel server) to Windows 2008 SP2 (Fileserver) and Windows 2008 SP2 + Exchange 2007)
    Since 2 days, the PC's aren't executing their login scripts anymore.
    Evenmore, when I put the login script as shortcut in the startup folder (all users on client PC) the drivemappings
    aren't created also.
    Currently the following policies still exist (in the same order):
    - Small Business Server Windows Firewall
    - Small Business Server Internet Connection Firewall
    - Small Business Server Client Computer
    - Small Business Server Remote Assistance Policy
    - Small Buniness Server Lockout Policy
    - Small Business Server Domain Password Policy
    - Default Domain Policy

    When I start the login script manually through the \\servername\sysvol\scripts\login.bat, all drive mapping are created succesfully.
    I've discovered this as the Terminal Server wasn't creating the drivemapping anymore and noticed that some PC's also have this problem.

    When I execute a gpresult from the Terminal Server, I have the following information :
    U:\timve>gpresult

    Microsoft (R) Windows (R) Operating System Group Policy Result tool v2.0
    Copyright (C) Microsoft Corp. 1981-2001

    Created On 7/8/2009 at 14:25:04


    RSOP data for DOMAIN\TIMVE on GPTERM01 : Logging Mode
    ------------------------------------------------------------

    OS Type: Microsoft(R) Windows(R) Server 2003, Standard Editi
    on
    OS Configuration: Member Server
    OS Version: 5.2.3790
    Terminal Server Mode: Application Server
    Site Name: N/A
    Roaming Profile:
    Local Profile: C:\Documents and Settings\timve
    Connected over a slow link?: No


    USER SETTINGS
    --------------
    CN=Tim Van Engeland,OU=Users,OU=Directie,OU=domain,DC=domain
    ,DC=local
    Last time Group Policy was applied: 7/8/2009 at 13:13:16
    Group Policy was applied from: GPFPS01.domain.local
    Group Policy slow link threshold: 500 kbps
    Domain Name: GREENPARTNERS
    Domain Type: Windows 2000

    Applied Group Policy Objects
    -----------------------------
    Default Domain Policy

    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
    Small Business Server Client Computer
    Filtering: Not Applied (Empty)

    Small Business Server Remote Assistance Policy
    Filtering: Disabled (GPO)

    AdvAgentUnInstall
    Filtering: Disabled (GPO)

    Small Business Server Internet Connection Firewall
    Filtering: Denied (WMI Filter)
    WMI Filter: PreSP2

    Small Business Server Lockout Policy
    Filtering: Disabled (GPO)

    Small Business Server Windows Firewall
    Filtering: Denied (WMI Filter)
    WMI Filter: PostSP2

    Local Group Policy
    Filtering: Not Applied (Empty)

    Small Business Server Domain Password Policy
    Filtering: Not Applied (Empty)

    The user is a part of the following security groups
    ---------------------------------------------------
    Domain Users
    Everyone
    Remote Desktop Users
    BUILTIN\Users
    REMOTE INTERACTIVE LOGON
    NT AUTHORITY\INTERACTIVE
    NT AUTHORITY\Authenticated Users
    This Organization
    LOCAL
    SG-GP-DIRECTIE
    SG-GREENPARTNERS

    Because the problem is escalating right now, I've did the following :
    - Unchecked the extra policies "Link Enabled".
    - gupdate on client pc
    - reboot

    Still the same problem.
    As it was solved this morning by just using a "net use * /DELETE /YES" and run the login script manually,it doesn't work anymore.
    Some of the PC where it doesn't work, show "Disconnected Netwerk Drive (H. Right clicking them and choose disconnect gives an error "This network connection does not exist".

    Someone has some advice for me?

    Regard,
    Tim Van Engeland

  • #2
    Re: Weird problem with policies/login script after migration (SBS2K3 -> Win200

    Hello,

    I have an update on this mather. I fixed it someway, but I'm not satisfied about it.
    The user's home folder is mapped to \\servername\users\%username%
    This was always correctly mapped to drive u:
    I've created a delay in the logon script and noticed that when the script executes and runs the "net use" commands, it displayed something that is was an incorrect folder.
    When looking, I saw that drive U was mapped now to \\servername\users instead of \\servername\users\%username% , but it was still correctly configured.
    Because of that, it couldn't run, because users have very limited access to the user's shared root folder.

    How this error has come is something I don't have an answer for right now.
    After putting "c:" at the first line of the script, the mapping works correct now.

    The only problem I've to solve now, it to delete the "disconnected network drives (driveletter)" within explorer.
    I've tried with right clicking and choosing disconnect, but gives an error that the path could not be found.
    Also removing the entries (even all) in the [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Explorer\MountPoints2] of the windows registry doesn't solve the problem...

    But for the 1st problem, allready thanks for trying to help me further...

    Tim

    Comment

    Working...
    X