| Author | Messages | |
hriosm
Posts:18
 | | 04/06/2010 5:17 PM |
| Right now i have w2003 DC and XP wks, i want to copy a file to all wks
through gpo, my problem is that thorugh gpo the file is not copying to the
wks.
i have a little and easy CMD script that works if it is executed locally
from the WKS but if not working from my GPO
i have this as Startup script, i have read other forums and assigned domain
computers permission, everyone, auth users, almos everything to the share
where WKS have to retrive the file but is not working.
could anybody know how this could be working?
This is urgent, i will be pending of my email.
--
Antes que nadie, recuerda que cuentas contigo mismo.
Herm 2009
| | | |
| AndrewMcHale
Posts:0
| | 04/06/2010 5:30 PM |
| Hi Hector,
The script could be failing because the connection to the network has
not established yet. Do you set the "Always wait for network at computer
startup and logon" setting in your domain? It can be found under
"Computer Configuration\Administrative Templates\System\Logon\".
This would force the workstations to wait for the network connection to
establish before running any scripts, although it may increase the
system boot up time.
Hope this helps.
Andrew
From: Hector Rios [mailto:xxxxxxxxxxxxxxxx]
Sent: 06 April 2010 16:22
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] Files are not copying through GPO
Right now i have w2003 DC and XP wks, i want to copy a file to all wks
through gpo, my problem is that thorugh gpo the file is not copying to
the wks.
i have a little and easy CMD script that works if it is executed locally
from the WKS but if not working from my GPO
i have this as Startup script, i have read other forums and assigned
domain computers permission, everyone, auth users, almos everything to
the share where WKS have to retrive the file but is not working.
could anybody know how this could be working?
This is urgent, i will be pending of my email.
--
Antes que nadie, recuerda que cuentas contigo mismo.
Herm 2009
| | | |
| JamieNelson
Posts:166
| | 04/06/2010 5:44 PM |
| Andrew is right on here. Sometimes Group Policy Processing (especially
scripts) gets in a race condition with the initiation of the network
connection. Setting this setting usually helps quite a bit. If you're
still having problems you might also look at the
GpNetworkStartTimeoutPolicyValue registry setting and see if it helps.
It is discussed in the following KB article.
http://support.microsoft.com/default.aspx?scid=kb;en-us;840669
Also make sure you haven't only set share permissions. When dealing with
Share/NTFS permissions, remember that the most restrictive will always
win out. To make it simple, I always give "Authenticated Users" modify
rights on the share, and then I use NTFS permissions to lock down
access.
So in your case, make sure you have Share permissions opened up as
widely as possible and make sure that "Domain Computers" has a minimum
of "Read" NTFS permissions.
Jamie Nelson | Sr. Administrator | BI&T Infrastructure-Intel | Devon
Energy Corporation | Work: ' 405.552.8054 | Mobile: ' 405.248.7963 |
http://www.dvn.com <http://www.dvn.com/>
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Andrew McHale
Sent: Tuesday, April 06, 2010 10:36 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Files are not copying through GPO
Hi Hector,
The script could be failing because the connection to the network has
not established yet. Do you set the "Always wait for network at computer
startup and logon" setting in your domain? It can be found under
"Computer Configuration\Administrative Templates\System\Logon\".
This would force the workstations to wait for the network connection to
establish before running any scripts, although it may increase the
system boot up time.
Hope this helps.
Andrew
From: Hector Rios [mailto:xxxxxxxxxxxxxxxx]
Sent: 06 April 2010 16:22
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] Files are not copying through GPO
Right now i have w2003 DC and XP wks, i want to copy a file to all wks
through gpo, my problem is that thorugh gpo the file is not copying to
the wks.
i have a little and easy CMD script that works if it is executed locally
from the WKS but if not working from my GPO
i have this as Startup script, i have read other forums and assigned
domain computers permission, everyone, auth users, almos everything to
the share where WKS have to retrive the file but is not working.
could anybody know how this could be working?
This is urgent, i will be pending of my email.
--
Antes que nadie, recuerda que cuentas contigo mismo.
Herm 2009
Confidentiality Warning: This message and any attachments are intended only for the use of the intended recipient(s), are confidential, and may be privileged.
If you are not the intended recipient, you are hereby notified that any review, retransmission, conversion to hard copy, copying, circulation or other use of all or any portion of this message and any attachments is strictly prohibited. If you are not the intended recipient, please notify the sender immediately by return e-mail, and delete this message and any attachments from your system.
| | | |
| hriosm
Posts:18
| | 04/06/2010 6:04 PM |
| Thanks for your answer, as a test for my script before copy the file, i
create a directory
That directory is created, i enabled the show the starutp script while is
running, when it want to copy the file it said ACCESS DENIED.
then who wants access the network share? i allowed, domain computers,
administrators, everyone, auth users.
Thanks for following this with me.
2010/4/6 Andrew McHale <xxxxxxxxxxxxxxxx>
> Hi Hector,
> The script could be failing because the connection to the network has not
> established yet. Do you set the "Always *wait for network* at computer
> startup and logon" setting in your domain? It can be found under “Computer
> Configuration\Administrative Templates\System\Logon\”. This would force
> the workstations to wait for the network connection to establish before
> running any scripts, although it may increase the system boot up time.
>
> Hope this helps.
>
>
>
> Andrew
>
>
>
> *From:* Hector Rios [mailto:xxxxxxxxxxxxxxxx]
> *Sent:* 06 April 2010 16:22
> *To:* xxxxxxxxxxxxxxxx
> *Subject:* [gptalk] Files are not copying through GPO
>
>
>
> Right now i have w2003 DC and XP wks, i want to copy a file to all wks
> through gpo, my problem is that thorugh gpo the file is not copying to the
> wks.
>
>
>
> i have a little and easy CMD script that works if it is executed locally
> from the WKS but if not working from my GPO
>
>
>
> i have this as Startup script, i have read other forums and assigned domain
> computers permission, everyone, auth users, almos everything to the share
> where WKS have to retrive the file but is not working.
>
>
>
> could anybody know how this could be working?
>
>
>
> This is urgent, i will be pending of my email.
> --
> Antes que nadie, recuerda que cuentas contigo mismo.
> Herm 2009
>
--
Antes que nadie, recuerda que cuentas contigo mismo.
Herm 2009
| | | |
| hriosm
Posts:18
| | 04/06/2010 6:16 PM |
| i reviewed what andrew and you said, Network connection is not the problem,
i enabled to wait for a network connection, the message still is Access
Denied, i gave all necessary permissions you recommend me
Waiting more suggestions, i really appreciate your help
2010/4/6 Nelson, Jamie <xxxxxxxxxxxxxxxx>
> Andrew is right on here. Sometimes Group Policy Processing (especially
> scripts) gets in a race condition with the initiation of the network
> connection. Setting this setting usually helps quite a bit. If you’re still
> having problems you might also look at the GpNetworkStartTimeoutPolicyValue
> registry setting and see if it helps. It is discussed in the following KB
> article.
>
>
>
> http://support.microsoft.com/default.aspx?scid=kb;en-us;840669
>
>
>
> Also make sure you haven’t only set share permissions. When dealing with
> Share/NTFS permissions, remember that the most restrictive will always win
> out. To make it simple, I always give “Authenticated Users” modify rights on
> the share, and then I use NTFS permissions to lock down access.
>
>
>
> So in your case, make sure you have Share permissions opened up as widely
> as possible and make sure that “Domain Computers” has a minimum of “Read”
> NTFS permissions.
>
>
>
>
>
> *Jamie Nelson* | Sr. Administrator | BI&T Infrastructure-Intel | *Devon
> Energy Corporation* | Work: ' 405.552.8054 | Mobile: ' 405.248.7963 |
> http://www.dvn.com
>
>
>
> *From:* xxxxxxxxxxxxxxxx [mailto:
> xxxxxxxxxxxxxxxx] *On Behalf Of *Andrew McHale
> *Sent:* Tuesday, April 06, 2010 10:36 AM
>
> *To:* xxxxxxxxxxxxxxxx
> *Subject:* RE: [gptalk] Files are not copying through GPO
>
>
>
> Hi Hector,
> The script could be failing because the connection to the network has not
> established yet. Do you set the "Always *wait for network* at computer
> startup and logon" setting in your domain? It can be found under “Computer
> Configuration\Administrative Templates\System\Logon\”. This would force
> the workstations to wait for the network connection to establish before
> running any scripts, although it may increase the system boot up time.
>
> Hope this helps.
>
>
>
> Andrew
>
>
>
> *From:* Hector Rios [mailto:xxxxxxxxxxxxxxxx]
> *Sent:* 06 April 2010 16:22
> *To:* xxxxxxxxxxxxxxxx
> *Subject:* [gptalk] Files are not copying through GPO
>
>
>
> Right now i have w2003 DC and XP wks, i want to copy a file to all wks
> through gpo, my problem is that thorugh gpo the file is not copying to the
> wks.
>
>
>
> i have a little and easy CMD script that works if it is executed locally
> from the WKS but if not working from my GPO
>
>
>
> i have this as Startup script, i have read other forums and assigned domain
> computers permission, everyone, auth users, almos everything to the share
> where WKS have to retrive the file but is not working.
>
>
>
> could anybody know how this could be working?
>
>
>
> This is urgent, i will be pending of my email.
> --
> Antes que nadie, recuerda que cuentas contigo mismo.
> Herm 2009
>
> *
> ------------------------------
> *
>
> *Confidentiality Warning:* This message and any attachments are intended
> only for the use of the intended recipient(s), are confidential, and may be
> privileged. If you are not the intended recipient, you are hereby notified
> that any review, retransmission, conversion to hard copy, copying,
> circulation or other use of all or any portion of this message and any
> attachments is strictly prohibited. If you are not the intended recipient,
> please notify the sender immediately by return e-mail, and delete this
> message and any attachments from your system.
>
>
--
Antes que nadie, recuerda que cuentas contigo mismo.
Herm 2009
| | | |
| davesharples
Posts:55
| | 04/06/2010 6:18 PM |
| Denied on reading the file or writing to the local computer?
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Hector Rios
Sent: 06 April 2010 17:26
To: xxxxxxxxxxxxxxxx
Subject: Re: [gptalk] Files are not copying through GPO
i reviewed what andrew and you said, Network connection is not the problem, i enabled to wait for a network connection, the message still is Access Denied, i gave all necessary permissions you recommend me
Waiting more suggestions, i really appreciate your help
2010/4/6 Nelson, Jamie <xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>>
Andrew is right on here. Sometimes Group Policy Processing (especially scripts) gets in a race condition with the initiation of the network connection. Setting this setting usually helps quite a bit. If you're still having problems you might also look at the GpNetworkStartTimeoutPolicyValue registry setting and see if it helps. It is discussed in the following KB article.
http://support.microsoft.com/default.aspx?scid=kb;en-us;840669
Also make sure you haven't only set share permissions. When dealing with Share/NTFS permissions, remember that the most restrictive will always win out. To make it simple, I always give "Authenticated Users" modify rights on the share, and then I use NTFS permissions to lock down access.
So in your case, make sure you have Share permissions opened up as widely as possible and make sure that "Domain Computers" has a minimum of "Read" NTFS permissions.
Jamie Nelson | Sr. Administrator | BI&T Infrastructure-Intel | Devon Energy Corporation | Work: ' 405.552.8054 | Mobile: ' 405.248.7963 | http://www.dvn.com<http://www.dvn.com/>
From: xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx> [mailto:xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>] On Behalf Of Andrew McHale
Sent: Tuesday, April 06, 2010 10:36 AM
To: xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>
Subject: RE: [gptalk] Files are not copying through GPO
Hi Hector,
The script could be failing because the connection to the network has not established yet. Do you set the "Always wait for network at computer startup and logon" setting in your domain? It can be found under "Computer Configuration\Administrative Templates\System\Logon\".
This would force the workstations to wait for the network connection to establish before running any scripts, although it may increase the system boot up time.
Hope this helps.
Andrew
From: Hector Rios [mailto:xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>]
Sent: 06 April 2010 16:22
To: xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>
Subject: [gptalk] Files are not copying through GPO
Right now i have w2003 DC and XP wks, i want to copy a file to all wks through gpo, my problem is that thorugh gpo the file is not copying to the wks.
i have a little and easy CMD script that works if it is executed locally from the WKS but if not working from my GPO
i have this as Startup script, i have read other forums and assigned domain computers permission, everyone, auth users, almos everything to the share where WKS have to retrive the file but is not working.
could anybody know how this could be working?
This is urgent, i will be pending of my email.
--
Antes que nadie, recuerda que cuentas contigo mismo.
Herm 2009
________________________________
Confidentiality Warning: This message and any attachments are intended only for the use of the intended recipient(s), are confidential, and may be privileged. If you are not the intended recipient, you are hereby notified that any review, retransmission, conversion to hard copy, copying, circulation or other use of all or any portion of this message and any attachments is strictly prohibited. If you are not the intended recipient, please notify the sender immediately by return e-mail, and delete this message and any attachments from your system.
--
Antes que nadie, recuerda que cuentas contigo mismo.
Herm 2009
| | | |
| JamieNelson
Posts:166
| | 04/06/2010 6:21 PM |
| Did you ensure both your Share/NTFS permissions are allowing access as I
mentioned earlier?
Jamie Nelson | Sr. Administrator | BI&T Infrastructure-Intel | Devon
Energy Corporation | Work: ' 405.552.8054 | Mobile: ' 405.248.7963 |
http://www.dvn.com <http://www.dvn.com/>
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Hector Rios
Sent: Tuesday, April 06, 2010 11:17 AM
To: xxxxxxxxxxxxxxxx
Subject: Re: [gptalk] Files are not copying through GPO
Thanks for your answer, as a test for my script before copy the file, i
create a directory
That directory is created, i enabled the show the starutp script while
is running, when it want to copy the file it said ACCESS DENIED.
then who wants access the network share? i allowed, domain computers,
administrators, everyone, auth users.
Thanks for following this with me.
2010/4/6 Andrew McHale <xxxxxxxxxxxxxxxx>
Hi Hector,
The script could be failing because the connection to the network has
not established yet. Do you set the "Always wait for network at computer
startup and logon" setting in your domain? It can be found under
"Computer Configuration\Administrative Templates\System\Logon\".
This would force the workstations to wait for the network connection to
establish before running any scripts, although it may increase the
system boot up time.
Hope this helps.
Andrew
From: Hector Rios [mailto:xxxxxxxxxxxxxxxx]
Sent: 06 April 2010 16:22
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] Files are not copying through GPO
Right now i have w2003 DC and XP wks, i want to copy a file to all wks
through gpo, my problem is that thorugh gpo the file is not copying to
the wks.
i have a little and easy CMD script that works if it is executed locally
from the WKS but if not working from my GPO
i have this as Startup script, i have read other forums and assigned
domain computers permission, everyone, auth users, almos everything to
the share where WKS have to retrive the file but is not working.
could anybody know how this could be working?
This is urgent, i will be pending of my email.
--
Antes que nadie, recuerda que cuentas contigo mismo.
Herm 2009
--
Antes que nadie, recuerda que cuentas contigo mismo.
Herm 2009
Confidentiality Warning: This message and any attachments are intended only for the use of the intended recipient(s), are confidential, and may be privileged.
If you are not the intended recipient, you are hereby notified that any review, retransmission, conversion to hard copy, copying, circulation or other use of all or any portion of this message and any attachments is strictly prohibited. If you are not the intended recipient, please notify the sender immediately by return e-mail, and delete this message and any attachments from your system.
| | | |
| JamieNelson
Posts:166
| | 04/06/2010 6:53 PM |
| Hector,
As Dave mentioned, double check the folder you are trying to write to
and make sure NT AUTHORITY\LOCAL SYSTEM has access to write. If you can
create the folder with the script then you shouldn't have any problems
writing to it, but it never hurts to double check.
Also please list both the share and NTFS permissions (in their entirety)
from the folder you are copying from and we should be able to figure
this out.
Jamie Nelson | Sr. Administrator | BI&T Infrastructure-Intel | Devon
Energy Corporation | Work: ' 405.552.8054 | Mobile: ' 405.248.7963 |
http://www.dvn.com <http://www.dvn.com/>
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Dave Sharples
Sent: Tuesday, April 06, 2010 11:27 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Files are not copying through GPO
Denied on reading the file or writing to the local computer?
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Hector Rios
Sent: 06 April 2010 17:26
To: xxxxxxxxxxxxxxxx
Subject: Re: [gptalk] Files are not copying through GPO
i reviewed what andrew and you said, Network connection is not the
problem, i enabled to wait for a network connection, the message still
is Access Denied, i gave all necessary permissions you recommend me
Waiting more suggestions, i really appreciate your help
2010/4/6 Nelson, Jamie <xxxxxxxxxxxxxxxx>
Andrew is right on here. Sometimes Group Policy Processing (especially
scripts) gets in a race condition with the initiation of the network
connection. Setting this setting usually helps quite a bit. If you're
still having problems you might also look at the
GpNetworkStartTimeoutPolicyValue registry setting and see if it helps.
It is discussed in the following KB article.
http://support.microsoft.com/default.aspx?scid=kb;en-us;840669
Also make sure you haven't only set share permissions. When dealing with
Share/NTFS permissions, remember that the most restrictive will always
win out. To make it simple, I always give "Authenticated Users" modify
rights on the share, and then I use NTFS permissions to lock down
access.
So in your case, make sure you have Share permissions opened up as
widely as possible and make sure that "Domain Computers" has a minimum
of "Read" NTFS permissions.
Jamie Nelson | Sr. Administrator | BI&T Infrastructure-Intel | Devon
Energy Corporation | Work: ' 405.552.8054 | Mobile: ' 405.248.7963 |
http://www.dvn.com <http://www.dvn.com/>
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Andrew McHale
Sent: Tuesday, April 06, 2010 10:36 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Files are not copying through GPO
Hi Hector,
The script could be failing because the connection to the network has
not established yet. Do you set the "Always wait for network at computer
startup and logon" setting in your domain? It can be found under
"Computer Configuration\Administrative Templates\System\Logon\".
This would force the workstations to wait for the network connection to
establish before running any scripts, although it may increase the
system boot up time.
Hope this helps.
Andrew
From: Hector Rios [mailto:xxxxxxxxxxxxxxxx]
Sent: 06 April 2010 16:22
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] Files are not copying through GPO
Right now i have w2003 DC and XP wks, i want to copy a file to all wks
through gpo, my problem is that thorugh gpo the file is not copying to
the wks.
i have a little and easy CMD script that works if it is executed locally
from the WKS but if not working from my GPO
i have this as Startup script, i have read other forums and assigned
domain computers permission, everyone, auth users, almos everything to
the share where WKS have to retrive the file but is not working.
could anybody know how this could be working?
This is urgent, i will be pending of my email.
--
Antes que nadie, recuerda que cuentas contigo mismo.
Herm 2009
________________________________
Confidentiality Warning: This message and any attachments are intended
only for the use of the intended recipient(s), are confidential, and may
be privileged. If you are not the intended recipient, you are hereby
notified that any review, retransmission, conversion to hard copy,
copying, circulation or other use of all or any portion of this message
and any attachments is strictly prohibited. If you are not the intended
recipient, please notify the sender immediately by return e-mail, and
delete this message and any attachments from your system.
--
Antes que nadie, recuerda que cuentas contigo mismo.
Herm 2009
| | | |
| hriosm
Posts:18
| | 04/06/2010 7:12 PM |
| Thanks. Yes, the gpo is working, is listed under gporesult, the folder is
created from the script, but the copy of the file is always failing with the
access denied messages.
Share where my files are:
share permissions
authenticated users FC
Domain computers FC
Everyone FC
Security (NTFS)
Administrators FC
Authenticated users FC
domain computers FC
Everyone FC
Users FC
2010/4/6 Nelson, Jamie <xxxxxxxxxxxxxxxx>
> Hector,
>
>
>
> As Dave mentioned, double check the folder you are trying to write to and
> make sure NT AUTHORITY\LOCAL SYSTEM has access to write. If you can create
> the folder with the script then you shouldn’t have any problems writing to
> it, but it never hurts to double check.
>
>
>
> Also please list both the share and NTFS permissions (in their entirety)
> from the folder you are copying from and we should be able to figure this
> out.
>
>
>
> *Jamie Nelson* | Sr. Administrator | BI&T Infrastructure-Intel | *Devon
> Energy Corporation* | Work: ' 405.552.8054 | Mobile: ' 405.248.7963 |
> http://www.dvn.com
>
>
>
> *From:* xxxxxxxxxxxxxxxx [mailto:
> xxxxxxxxxxxxxxxx] *On Behalf Of *Dave Sharples
> *Sent:* Tuesday, April 06, 2010 11:27 AM
>
> *To:* xxxxxxxxxxxxxxxx
> *Subject:* RE: [gptalk] Files are not copying through GPO
>
>
>
> Denied on reading the file or writing to the local computer?
>
>
>
> *From:* xxxxxxxxxxxxxxxx [mailto:
> xxxxxxxxxxxxxxxx] *On Behalf Of *Hector Rios
> *Sent:* 06 April 2010 17:26
>
> *To:* xxxxxxxxxxxxxxxx
> *Subject:* Re: [gptalk] Files are not copying through GPO
>
>
>
> i reviewed what andrew and you said, Network connection is not the problem,
> i enabled to wait for a network connection, the message still is Access
> Denied, i gave all necessary permissions you recommend me
>
>
>
> Waiting more suggestions, i really appreciate your help
>
> 2010/4/6 Nelson, Jamie <xxxxxxxxxxxxxxxx>
>
> Andrew is right on here. Sometimes Group Policy Processing (especially
> scripts) gets in a race condition with the initiation of the network
> connection. Setting this setting usually helps quite a bit. If you’re still
> having problems you might also look at the GpNetworkStartTimeoutPolicyValue
> registry setting and see if it helps. It is discussed in the following KB
> article.
>
>
>
> http://support.microsoft.com/default.aspx?scid=kb;en-us;840669
>
>
>
> Also make sure you haven’t only set share permissions. When dealing with
> Share/NTFS permissions, remember that the most restrictive will always win
> out. To make it simple, I always give “Authenticated Users” modify rights on
> the share, and then I use NTFS permissions to lock down access.
>
>
>
> So in your case, make sure you have Share permissions opened up as widely
> as possible and make sure that “Domain Computers” has a minimum of “Read”
> NTFS permissions.
>
>
>
>
>
> *Jamie Nelson* | Sr. Administrator | BI&T Infrastructure-Intel | *Devon
> Energy Corporation* | Work: ' 405.552.8054 | Mobile: ' 405.248.7963 |
> http://www.dvn.com
>
>
>
> *From:* xxxxxxxxxxxxxxxx [mailto:
> xxxxxxxxxxxxxxxx] *On Behalf Of *Andrew McHale
> *Sent:* Tuesday, April 06, 2010 10:36 AM
>
>
> *To:* xxxxxxxxxxxxxxxx
>
> *Subject:* RE: [gptalk] Files are not copying through GPO
>
>
>
> Hi Hector,
> The script could be failing because the connection to the network has not
> established yet. Do you set the "Always *wait for network* at computer
> startup and logon" setting in your domain? It can be found under “Computer
> Configuration\Administrative Templates\System\Logon\”. This would force
> the workstations to wait for the network connection to establish before
> running any scripts, although it may increase the system boot up time.
>
> Hope this helps.
>
>
>
> Andrew
>
>
>
> *From:* Hector Rios [mailto:xxxxxxxxxxxxxxxx]
> *Sent:* 06 April 2010 16:22
> *To:* xxxxxxxxxxxxxxxx
> *Subject:* [gptalk] Files are not copying through GPO
>
>
>
> Right now i have w2003 DC and XP wks, i want to copy a file to all wks
> through gpo, my problem is that thorugh gpo the file is not copying to the
> wks.
>
>
>
> i have a little and easy CMD script that works if it is executed locally
> from the WKS but if not working from my GPO
>
>
>
> i have this as Startup script, i have read other forums and assigned domain
> computers permission, everyone, auth users, almos everything to the share
> where WKS have to retrive the file but is not working.
>
>
>
> could anybody know how this could be working?
>
>
>
> This is urgent, i will be pending of my email.
> --
> Antes que nadie, recuerda que cuentas contigo mismo.
> Herm 2009
> *
> ------------------------------
> *
>
> *Confidentiality Warning:* This message and any attachments are intended
> only for the use of the intended recipient(s), are confidential, and may be
> privileged. If you are not the intended recipient, you are hereby notified
> that any review, retransmission, conversion to hard copy, copying,
> circulation or other use of all or any portion of this message and any
> attachments is strictly prohibited. If you are not the intended recipient,
> please notify the sender immediately by return e-mail, and delete this
> message and any attachments from your system.
>
>
>
>
> --
> Antes que nadie, recuerda que cuentas contigo mismo.
> Herm 2009
>
--
Antes que nadie, recuerda que cuentas contigo mismo.
Herm 2009
| | | |
| Martin_Hugo
Posts:26
| | 04/06/2010 7:20 PM |
| Don't you need to include some switches to prevent prompting?
Martin T. Hugo
Network Administrator
Hilliard City Schools
Tel: 614-921-7102
________________________________
From: xxxxxxxxxxxxxxxx [xxxxxxxxxxxxxxxx] On Behalf Of Hector Rios [xxxxxxxxxxxxxxxx]
Sent: Tuesday, April 06, 2010 1:16 PM
To: xxxxxxxxxxxxxxxx
Subject: Re: [gptalk] Files are not copying through GPO
Reading the file from the origin.
my script said
xcopy \\myserver\myshare\myfile<file://myserver/myshare/myfile> c:\dircreatedbyscript\myfile
it seems that user/computer at startup script is not allowed to access my share.
2010/4/6 Dave Sharples <xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>>
Denied on reading the file or writing to the local computer?
From: xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx> [mailto:xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>] On Behalf Of Hector Rios
Sent: 06 April 2010 17:26
To: xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>
Subject: Re: [gptalk] Files are not copying through GPO
i reviewed what andrew and you said, Network connection is not the problem, i enabled to wait for a network connection, the message still is Access Denied, i gave all necessary permissions you recommend me
Waiting more suggestions, i really appreciate your help
2010/4/6 Nelson, Jamie <xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>>
Andrew is right on here. Sometimes Group Policy Processing (especially scripts) gets in a race condition with the initiation of the network connection. Setting this setting usually helps quite a bit. If you’re still having problems you might also look at the GpNetworkStartTimeoutPolicyValue registry setting and see if it helps. It is discussed in the following KB article.
http://support.microsoft.com/default.aspx?scid=kb;en-us;840669
Also make sure you haven’t only set share permissions. When dealing with Share/NTFS permissions, remember that the most restrictive will always win out. To make it simple, I always give “Authenticated Users” modify rights on the share, and then I use NTFS permissions to lock down access.
So in your case, make sure you have Share permissions opened up as widely as possible and make sure that “Domain Computers” has a minimum of “Read” NTFS permissions.
Jamie Nelson | Sr. Administrator | BI&T Infrastructure-Intel | Devon Energy Corporation | Work: ' 405.552.8054 | Mobile: ' 405.248.7963 | http://www.dvn.com<http://www.dvn.com/>
From: xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx> [mailto:xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>] On Behalf Of Andrew McHale
Sent: Tuesday, April 06, 2010 10:36 AM
To: xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>
Subject: RE: [gptalk] Files are not copying through GPO
Hi Hector,
The script could be failing because the connection to the network has not established yet. Do you set the "Always wait for network at computer startup and logon" setting in your domain? It can be found under “Computer Configuration\Administrative Templates\System\Logon\”.
This would force the workstations to wait for the network connection to establish before running any scripts, although it may increase the system boot up time.
Hope this helps.
Andrew
From: Hector Rios [mailto:xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>]
Sent: 06 April 2010 16:22
To: xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>
Subject: [gptalk] Files are not copying through GPO
Right now i have w2003 DC and XP wks, i want to copy a file to all wks through gpo, my problem is that thorugh gpo the file is not copying to the wks.
i have a little and easy CMD script that works if it is executed locally from the WKS but if not working from my GPO
i have this as Startup script, i have read other forums and assigned domain computers permission, everyone, auth users, almos everything to the share where WKS have to retrive the file but is not working.
could anybody know how this could be working?
This is urgent, i will be pending of my email.
--
Antes que nadie, recuerda que cuentas contigo mismo.
Herm 2009
________________________________
Confidentiality Warning: This message and any attachments are intended only for the use of the intended recipient(s), are confidential, and may be privileged. If you are not the intended recipient, you are hereby notified that any review, retransmission, conversion to hard copy, copying, circulation or other use of all or any portion of this message and any attachments is strictly prohibited. If you are not the intended recipient, please notify the sender immediately by return e-mail, and delete this message and any attachments from your system.
--
Antes que nadie, recuerda que cuentas contigo mismo.
Herm 2009
--
Antes que nadie, recuerda que cuentas contigo mismo.
Herm 2009
| | | |
| davesharples
Posts:55
| | 04/06/2010 7:20 PM |
| You haven't made it clear where the error is coming from, you will need to do some debugging to figure it out.
Also you need the /Y switch to prevent promoting as Martin pointed out.
On 6 Apr 2010, at 18:16, Hector Rios wrote:
Reading the file from the origin.
my script said
xcopy \\myserver\myshare\myfile<file://myserver/myshare/myfile> c:\dircreatedbyscript\myfile
it seems that user/computer at startup script is not allowed to access my share.
2010/4/6 Dave Sharples <xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>>
Denied on reading the file or writing to the local computer?
From: xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx> [mailto:xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>] On Behalf Of Hector Rios
Sent: 06 April 2010 17:26
To: xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>
Subject: Re: [gptalk] Files are not copying through GPO
i reviewed what andrew and you said, Network connection is not the problem, i enabled to wait for a network connection, the message still is Access Denied, i gave all necessary permissions you recommend me
Waiting more suggestions, i really appreciate your help
2010/4/6 Nelson, Jamie <xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>>
Andrew is right on here. Sometimes Group Policy Processing (especially scripts) gets in a race condition with the initiation of the network connection. Setting this setting usually helps quite a bit. If you’re still having problems you might also look at the GpNetworkStartTimeoutPolicyValue registry setting and see if it helps. It is discussed in the following KB article.
http://support.microsoft.com/default.aspx?scid=kb;en-us;840669
Also make sure you haven’t only set share permissions. When dealing with Share/NTFS permissions, remember that the most restrictive will always win out. To make it simple, I always give “Authenticated Users” modify rights on the share, and then I use NTFS permissions to lock down access.
So in your case, make sure you have Share permissions opened up as widely as possible and make sure that “Domain Computers” has a minimum of “Read” NTFS permissions.
Jamie Nelson | Sr. Administrator | BI&T Infrastructure-Intel | Devon Energy Corporation | Work: ' 405.552.8054 | Mobile: ' 405.248.7963 | http://www.dvn.com<http://www.dvn.com/>
From: xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx> [mailto:xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>] On Behalf Of Andrew McHale
Sent: Tuesday, April 06, 2010 10:36 AM
To: xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>
Subject: RE: [gptalk] Files are not copying through GPO
Hi Hector,
The script could be failing because the connection to the network has not established yet. Do you set the "Always wait for network at computer startup and logon" setting in your domain? It can be found under “Computer Configuration\Administrative Templates\System\Logon\”.
This would force the workstations to wait for the network connection to establish before running any scripts, although it may increase the system boot up time.
Hope this helps.
Andrew
From: Hector Rios [mailto:xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>]
Sent: 06 April 2010 16:22
To: xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>
Subject: [gptalk] Files are not copying through GPO
Right now i have w2003 DC and XP wks, i want to copy a file to all wks through gpo, my problem is that thorugh gpo the file is not copying to the wks.
i have a little and easy CMD script that works if it is executed locally from the WKS but if not working from my GPO
i have this as Startup script, i have read other forums and assigned domain computers permission, everyone, auth users, almos everything to the share where WKS have to retrive the file but is not working.
could anybody know how this could be working?
This is urgent, i will be pending of my email.
--
Antes que nadie, recuerda que cuentas contigo mismo.
Herm 2009
________________________________
Confidentiality Warning: This message and any attachments are intended only for the use of the intended recipient(s), are confidential, and may be privileged. If you are not the intended recipient, you are hereby notified that any review, retransmission, conversion to hard copy, copying, circulation or other use of all or any portion of this message and any attachments is strictly prohibited. If you are not the intended recipient, please notify the sender immediately by return e-mail, and delete this message and any attachments from your system.
--
Antes que nadie, recuerda que cuentas contigo mismo.
Herm 2009
--
Antes que nadie, recuerda que cuentas contigo mismo.
Herm 2009
| | | |
| jeromelcruz
Posts:120
| | 04/06/2010 7:20 PM |
| Hector,
* In addition to the NTFS permissions on the folder (on the server), please also check the permissions on the file itself to make sure that any 'explicit' permissions on the file itself allow access. Explicit permissions on the file would override inherited permissions from the parent folder.
* Also, do you have any 'Deny access to this computer from the network' - 'User Rights Assignment' policy settings defined?
Jerry
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Hector Rios
Sent: Tuesday, April 06, 2010 10:14 AM
To: xxxxxxxxxxxxxxxx
Subject: Re: [gptalk] Files are not copying through GPO
Thanks. Yes, the gpo is working, is listed under gporesult, the folder is created from the script, but the copy of the file is always failing with the access denied messages.
Share where my files are:
share permissions
authenticated users FC
Domain computers FC
Everyone FC
Security (NTFS)
Administrators FC
Authenticated users FC
domain computers FC
Everyone FC
Users FC
2010/4/6 Nelson, Jamie <xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>>
Hector,
As Dave mentioned, double check the folder you are trying to write to and make sure NT AUTHORITY\LOCAL SYSTEM has access to write. If you can create the folder with the script then you shouldn't have any problems writing to it, but it never hurts to double check.
Also please list both the share and NTFS permissions (in their entirety) from the folder you are copying from and we should be able to figure this out.
Jamie Nelson | Sr. Administrator | BI&T Infrastructure-Intel | Devon Energy Corporation | Work: ' 405.552.8054 | Mobile: ' 405.248.7963 | http://www.dvn.com<http://www.dvn.com/>
From: xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx> [mailto:xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>] On Behalf Of Dave Sharples
Sent: Tuesday, April 06, 2010 11:27 AM
To: xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>
Subject: RE: [gptalk] Files are not copying through GPO
Denied on reading the file or writing to the local computer?
From: xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx> [mailto:xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>] On Behalf Of Hector Rios
Sent: 06 April 2010 17:26
To: xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>
Subject: Re: [gptalk] Files are not copying through GPO
i reviewed what andrew and you said, Network connection is not the problem, i enabled to wait for a network connection, the message still is Access Denied, i gave all necessary permissions you recommend me
Waiting more suggestions, i really appreciate your help
2010/4/6 Nelson, Jamie <xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>>
Andrew is right on here. Sometimes Group Policy Processing (especially scripts) gets in a race condition with the initiation of the network connection. Setting this setting usually helps quite a bit. If you're still having problems you might also look at the GpNetworkStartTimeoutPolicyValue registry setting and see if it helps. It is discussed in the following KB article.
http://support.microsoft.com/default.aspx?scid=kb;en-us;840669
Also make sure you haven't only set share permissions. When dealing with Share/NTFS permissions, remember that the most restrictive will always win out. To make it simple, I always give "Authenticated Users" modify rights on the share, and then I use NTFS permissions to lock down access.
So in your case, make sure you have Share permissions opened up as widely as possible and make sure that "Domain Computers" has a minimum of "Read" NTFS permissions.
Jamie Nelson | Sr. Administrator | BI&T Infrastructure-Intel | Devon Energy Corporation | Work: ' 405.552.8054 | Mobile: ' 405.248.7963 | http://www.dvn.com<http://www.dvn.com/>
From: xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx> [mailto:xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>] On Behalf Of Andrew McHale
Sent: Tuesday, April 06, 2010 10:36 AM
To: xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>
Subject: RE: [gptalk] Files are not copying through GPO
Hi Hector,
The script could be failing because the connection to the network has not established yet. Do you set the "Always wait for network at computer startup and logon" setting in your domain? It can be found under "Computer Configuration\Administrative Templates\System\Logon\".
This would force the workstations to wait for the network connection to establish before running any scripts, although it may increase the system boot up time.
Hope this helps.
Andrew
From: Hector Rios [mailto:xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>]
Sent: 06 April 2010 16:22
To: xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>
Subject: [gptalk] Files are not copying through GPO
Right now i have w2003 DC and XP wks, i want to copy a file to all wks through gpo, my problem is that thorugh gpo the file is not copying to the wks.
i have a little and easy CMD script that works if it is executed locally from the WKS but if not working from my GPO
i have this as Startup script, i have read other forums and assigned domain computers permission, everyone, auth users, almos everything to the share where WKS have to retrive the file but is not working.
could anybody know how this could be working?
This is urgent, i will be pending of my email.
--
Antes que nadie, recuerda que cuentas contigo mismo.
Herm 2009
________________________________
Confidentiality Warning: This message and any attachments are intended only for the use of the intended recipient(s), are confidential, and may be privileged. If you are not the intended recipient, you are hereby notified that any review, retransmission, conversion to hard copy, copying, circulation or other use of all or any portion of this message and any attachments is strictly prohibited. If you are not the intended recipient, please notify the sender immediately by return e-mail, and delete this message and any attachments from your system.
--
Antes que nadie, recuerda que cuentas contigo mismo.
Herm 2009
--
Antes que nadie, recuerda que cuentas contigo mismo.
Herm 2009
| | | |
| hriosm
Posts:18
| | 04/06/2010 7:23 PM |
| yes sr. i indluded /y. i just want to show you as simple as possible.
Now my script is working but i needed to map a network drive first with any
user credentials
could you let me know how to encrypt the password of that user to avoid show
that on the script?
thanks.
2010/4/6 Martin Hugo <xxxxxxxxxxxxxxxx>
> Don't you need to include some switches to prevent prompting?
>
> Martin T. Hugo
> Network Administrator
> Hilliard City Schools
> Tel: 614-921-7102
> ------------------------------
> *From:* xxxxxxxxxxxxxxxx [xxxxxxxxxxxxxxxx] On
> Behalf Of Hector Rios [xxxxxxxxxxxxxxxx]
> *Sent:* Tuesday, April 06, 2010 1:16 PM
>
> *To:* xxxxxxxxxxxxxxxx
> *Subject:* Re: [gptalk] Files are not copying through GPO
>
> Reading the file from the origin.
>
> my script said
>
> xcopy \\myserver\myshare\myfile c:\dircreatedbyscript\myfile
>
> it seems that user/computer at startup script is not allowed to access my
> share.
>
>
>
> 2010/4/6 Dave Sharples <xxxxxxxxxxxxxxxx>
>
>> Denied on reading the file or writing to the local computer?
>>
>>
>>
>> *From:* xxxxxxxxxxxxxxxx [mailto:
>> xxxxxxxxxxxxxxxx] *On Behalf Of *Hector Rios
>> *Sent:* 06 April 2010 17:26
>>
>> *To:* xxxxxxxxxxxxxxxx
>> *Subject:* Re: [gptalk] Files are not copying through GPO
>>
>>
>>
>> i reviewed what andrew and you said, Network connection is not the
>> problem, i enabled to wait for a network connection, the message still is
>> Access Denied, i gave all necessary permissions you recommend me
>>
>>
>>
>> Waiting more suggestions, i really appreciate your help
>>
>> 2010/4/6 Nelson, Jamie <xxxxxxxxxxxxxxxx>
>>
>> Andrew is right on here. Sometimes Group Policy Processing (especially
>> scripts) gets in a race condition with the initiation of the network
>> connection. Setting this setting usually helps quite a bit. If you’re still
>> having problems you might also look at the GpNetworkStartTimeoutPolicyValue
>> registry setting and see if it helps. It is discussed in the following KB
>> article.
>>
>>
>>
>> http://support.microsoft.com/default.aspx?scid=kb;en-us;840669
>>
>>
>>
>> Also make sure you haven’t only set share permissions. When dealing with
>> Share/NTFS permissions, remember that the most restrictive will always win
>> out. To make it simple, I always give “Authenticated Users” modify rights on
>> the share, and then I use NTFS permissions to lock down access.
>>
>>
>>
>> So in your case, make sure you have Share permissions opened up as widely
>> as possible and make sure that “Domain Computers” has a minimum of “Read”
>> NTFS permissions.
>>
>>
>>
>>
>>
>> *Jamie Nelson* | Sr. Administrator | BI&T Infrastructure-Intel | *Devon
>> Energy Corporation* | Work: ' 405.552.8054 | Mobile: ' 405.248.7963 |
>> http://www.dvn.com
>>
>>
>>
>> *From:* xxxxxxxxxxxxxxxx [mailto:
>> xxxxxxxxxxxxxxxx] *On Behalf Of *Andrew McHale
>> *Sent:* Tuesday, April 06, 2010 10:36 AM
>>
>>
>> *To:* xxxxxxxxxxxxxxxx
>>
>> *Subject:* RE: [gptalk] Files are not copying through GPO
>>
>>
>>
>> Hi Hector,
>> The script could be failing because the connection to the network has not
>> established yet. Do you set the "Always *wait for network* at computer
>> startup and logon" setting in your domain? It can be found under “Computer
>> Configuration\Administrative Templates\System\Logon\”. This would force
>> the workstations to wait for the network connection to establish before
>> running any scripts, although it may increase the system boot up time.
>>
>> Hope this helps.
>>
>>
>>
>> Andrew
>>
>>
>>
>> *From:* Hector Rios [mailto:xxxxxxxxxxxxxxxx]
>> *Sent:* 06 April 2010 16:22
>> *To:* xxxxxxxxxxxxxxxx
>> *Subject:* [gptalk] Files are not copying through GPO
>>
>>
>>
>> Right now i have w2003 DC and XP wks, i want to copy a file to all wks
>> through gpo, my problem is that thorugh gpo the file is not copying to the
>> wks.
>>
>>
>>
>> i have a little and easy CMD script that works if it is executed locally
>> from the WKS but if not working from my GPO
>>
>>
>>
>> i have this as Startup script, i have read other forums and assigned
>> domain computers permission, everyone, auth users, almos everything to the
>> share where WKS have to retrive the file but is not working.
>>
>>
>>
>> could anybody know how this could be working?
>>
>>
>>
>> This is urgent, i will be pending of my email.
>> --
>> Antes que nadie, recuerda que cuentas contigo mismo.
>> Herm 2009
>> *
>> ------------------------------
>> *
>>
>> *Confidentiality Warning:* This message and any attachments are intended
>> only for the use of the intended recipient(s), are confidential, and may be
>> privileged. If you are not the intended recipient, you are hereby notified
>> that any review, retransmission, conversion to hard copy, copying,
>> circulation or other use of all or any portion of this message and any
>> attachments is strictly prohibited. If you are not the intended recipient,
>> please notify the sender immediately by return e-mail, and delete this
>> message and any attachments from your system.
>>
>>
>>
>>
>> --
>> Antes que nadie, recuerda que cuentas contigo mismo.
>> Herm 2009
>>
>
>
>
> --
> Antes que nadie, recuerda que cuentas contigo mismo.
> Herm 2009
>
--
Antes que nadie, recuerda que cuentas contigo mismo.
Herm 2009
| | | |
| JamieNelson
Posts:166
| | 04/06/2010 7:49 PM |
| If you have granted the computer object the required permissions, you
should be able to map the drive without having to provide a user's
credentials. Curious why you would need to do this in a startup script
though.
Jamie Nelson | Sr. Administrator | BI&T Infrastructure-Intel | Devon
Energy Corporation | Work: ' 405.552.8054 | Mobile: ' 405.248.7963 |
http://www.dvn.com <http://www.dvn.com/>
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Hector Rios
Sent: Tuesday, April 06, 2010 1:18 PM
To: xxxxxxxxxxxxxxxx
Subject: Re: [gptalk] Files are not copying through GPO
yes sr. i indluded /y. i just want to show you as simple as possible.
Now my script is working but i needed to map a network drive first with
any user credentials
could you let me know how to encrypt the password of that user to avoid
show that on the script?
thanks.
2010/4/6 Martin Hugo <xxxxxxxxxxxxxxxx>
Don't you need to include some switches to prevent prompting?
Martin T. Hugo
Network Administrator
Hilliard City Schools
Tel: 614-921-7102
________________________________
From: xxxxxxxxxxxxxxxx [xxxxxxxxxxxxxxxx] On
Behalf Of Hector Rios [xxxxxxxxxxxxxxxx]
Sent: Tuesday, April 06, 2010 1:16 PM
To: xxxxxxxxxxxxxxxx
Subject: Re: [gptalk] Files are not copying through GPO
Reading the file from the origin.
my script said
xcopy \\myserver\myshare\myfile <file:///\\myserver\myshare\myfile>
c:\dircreatedbyscript\myfile
it seems that user/computer at startup script is not allowed to access
my share.
2010/4/6 Dave Sharples <xxxxxxxxxxxxxxxx>
Denied on reading the file or writing to the local computer?
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Hector Rios
Sent: 06 April 2010 17:26
To: xxxxxxxxxxxxxxxx
Subject: Re: [gptalk] Files are not copying through GPO
i reviewed what andrew and you said, Network connection is not the
problem, i enabled to wait for a network connection, the message still
is Access Denied, i gave all necessary permissions you recommend me
Waiting more suggestions, i really appreciate your help
2010/4/6 Nelson, Jamie <xxxxxxxxxxxxxxxx>
Andrew is right on here. Sometimes Group Policy Processing (especially
scripts) gets in a race condition with the initiation of the network
connection. Setting this setting usually helps quite a bit. If you're
still having problems you might also look at the
GpNetworkStartTimeoutPolicyValue registry setting and see if it helps.
It is discussed in the following KB article.
http://support.microsoft.com/default.aspx?scid=kb;en-us;840669
Also make sure you haven't only set share permissions. When dealing with
Share/NTFS permissions, remember that the most restrictive will always
win out. To make it simple, I always give "Authenticated Users" modify
rights on the share, and then I use NTFS permissions to lock down
access.
So in your case, make sure you have Share permissions opened up as
widely as possible and make sure that "Domain Computers" has a minimum
of "Read" NTFS permissions.
Jamie Nelson | Sr. Administrator | BI&T Infrastructure-Intel | Devon
Energy Corporation | Work: ' 405.552.8054 | Mobile: ' 405.248.7963 |
http://www.dvn.com <http://www.dvn.com/>
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Andrew McHale
Sent: Tuesday, April 06, 2010 10:36 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Files are not copying through GPO
Hi Hector,
The script could be failing because the connection to the network has
not established yet. Do you set the "Always wait for network at computer
startup and logon" setting in your domain? It can be found under
"Computer Configuration\Administrative Templates\System\Logon\".
This would force the workstations to wait for the network connection to
establish before running any scripts, although it may increase the
system boot up time.
Hope this helps.
Andrew
From: Hector Rios [mailto:xxxxxxxxxxxxxxxx]
Sent: 06 April 2010 16:22
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] Files are not copying through GPO
Right now i have w2003 DC and XP wks, i want to copy a file to all wks
through gpo, my problem is that thorugh gpo the file is not copying to
the wks.
i have a little and easy CMD script that works if it is executed locally
from the WKS but if not working from my GPO
i have this as Startup script, i have read other forums and assigned
domain computers permission, everyone, auth users, almos everything to
the share where WKS have to retrive the file but is not working.
could anybody know how this could be working?
This is urgent, i will be pending of my email.
--
Antes que nadie, recuerda que cuentas contigo mismo.
Herm 2009
________________________________
Confidentiality Warning: This message and any attachments are intended
only for the use of the intended recipient(s), are confidential, and may
be privileged. If you are not the intended recipient, you are hereby
notified that any review, retransmission, conversion to hard copy,
copying, circulation or other use of all or any portion of this message
and any attachments is strictly prohibited. If you are not the intended
recipient, please notify the sender immediately by return e-mail, and
delete this message and any attachments from your system.
--
Antes que nadie, recuerda que cuentas contigo mismo.
Herm 2009
--
Antes que nadie, recuerda que cuentas contigo mismo.
Herm 2009
--
Antes que nadie, recuerda que cuentas contigo mismo.
Herm 2009
| | | |
| hriosm
Posts:18
| | 04/06/2010 8:10 PM |
| i gave domain computers fc permission and didnt work, HD want to have on all
Domain machines a special file to run in case they needed, the only way to
transfer that to all of them is a GPO.
to avoid user names and doing a mess with our currently logon script, i
decided to do that as an startup script.
thanks.
2010/4/6 Nelson, Jamie <xxxxxxxxxxxxxxxx>
> If you have granted the computer object the required permissions, you
> should be able to map the drive without having to provide a user’s
> credentials. Curious why you would need to do this in a startup script
> though.
>
>
>
> *Jamie Nelson* | Sr. Administrator | BI&T Infrastructure-Intel | *Devon
> Energy Corporation* | Work: ' 405.552.8054 | Mobile: ' 405.248.7963 |
> http://www.dvn.com
>
>
>
> *From:* xxxxxxxxxxxxxxxx [mailto:
> xxxxxxxxxxxxxxxx] *On Behalf Of *Hector Rios
> *Sent:* Tuesday, April 06, 2010 1:18 PM
>
> *To:* xxxxxxxxxxxxxxxx
> *Subject:* Re: [gptalk] Files are not copying through GPO
>
>
>
> yes sr. i indluded /y. i just want to show you as simple as possible.
>
>
>
> Now my script is working but i needed to map a network drive first with any
> user credentials
>
> could you let me know how to encrypt the password of that user to avoid
> show that on the script?
>
>
>
> thanks.
>
> 2010/4/6 Martin Hugo <xxxxxxxxxxxxxxxx>
>
> Don't you need to include some switches to prevent prompting?
>
>
>
> Martin T. Hugo
>
> Network Administrator
>
> Hilliard City Schools
>
> Tel: 614-921-7102
> ------------------------------
>
> *From:* xxxxxxxxxxxxxxxx [xxxxxxxxxxxxxxxx] On
> Behalf Of Hector Rios [xxxxxxxxxxxxxxxx]
> *Sent:* Tuesday, April 06, 2010 1:16 PM
>
>
> *To:* xxxxxxxxxxxxxxxx
> *Subject:* Re: [gptalk] Files are not copying through GPO
>
>
>
> Reading the file from the origin.
>
>
>
> my script said
>
>
>
> xcopy \\myserver\myshare\myfile c:\dircreatedbyscript\myfile
>
>
>
> it seems that user/computer at startup script is not allowed to access my
> share.
>
>
>
>
>
> 2010/4/6 Dave Sharples <xxxxxxxxxxxxxxxx>
>
> Denied on reading the file or writing to the local computer?
>
>
>
> *From:* xxxxxxxxxxxxxxxx [mailto:
> xxxxxxxxxxxxxxxx] *On Behalf Of *Hector Rios
> *Sent:* 06 April 2010 17:26
>
>
> *To:* xxxxxxxxxxxxxxxx
>
> *Subject:* Re: [gptalk] Files are not copying through GPO
>
>
>
> i reviewed what andrew and you said, Network connection is not the problem,
> i enabled to wait for a network connection, the message still is Access
> Denied, i gave all necessary permissions you recommend me
>
>
>
> Waiting more suggestions, i really appreciate your help
>
> 2010/4/6 Nelson, Jamie <xxxxxxxxxxxxxxxx>
>
> Andrew is right on here. Sometimes Group Policy Processing (especially
> scripts) gets in a race condition with the initiation of the network
> connection. Setting this setting usually helps quite a bit. If you’re still
> having problems you might also look at the GpNetworkStartTimeoutPolicyValue
> registry setting and see if it helps. It is discussed in the following KB
> article.
>
>
>
> http://support.microsoft.com/default.aspx?scid=kb;en-us;840669
>
>
>
> Also make sure you haven’t only set share permissions. When dealing with
> Share/NTFS permissions, remember that the most restrictive will always win
> out. To make it simple, I always give “Authenticated Users” modify rights on
> the share, and then I use NTFS permissions to lock down access.
>
>
>
> So in your case, make sure you have Share permissions opened up as widely
> as possible and make sure that “Domain Computers” has a minimum of “Read”
> NTFS permissions.
>
>
>
>
>
> *Jamie Nelson* | Sr. Administrator | BI&T Infrastructure-Intel | *Devon
> Energy Corporation* | Work: ' 405.552.8054 | Mobile: ' 405.248.7963 |
> http://www.dvn.com
>
>
>
> *From:* xxxxxxxxxxxxxxxx [mailto:
> xxxxxxxxxxxxxxxx] *On Behalf Of *Andrew McHale
> *Sent:* Tuesday, April 06, 2010 10:36 AM
>
>
> *To:* xxxxxxxxxxxxxxxx
>
> *Subject:* RE: [gptalk] Files are not copying through GPO
>
>
>
> Hi Hector,
> The script could be failing because the connection to the network has not
> established yet. Do you set the "Always *wait for network* at computer
> startup and logon" setting in your domain? It can be found under “Computer
> Configuration\Administrative Templates\System\Logon\”. This would force
> the workstations to wait for the network connection to establish before
> running any scripts, although it may increase the system boot up time.
>
> Hope this helps.
>
>
>
> Andrew
>
>
>
> *From:* Hector Rios [mailto:xxxxxxxxxxxxxxxx]
> *Sent:* 06 April 2010 16:22
> *To:* xxxxxxxxxxxxxxxx
> *Subject:* [gptalk] Files are not copying through GPO
>
>
>
> Right now i have w2003 DC and XP wks, i want to copy a file to all wks
> through gpo, my problem is that thorugh gpo the file is not copying to the
> wks.
>
>
>
> i have a little and easy CMD script that works if it is executed locally
> from the WKS but if not working from my GPO
>
>
>
> i have this as Startup script, i have read other forums and assigned domain
> computers permission, everyone, auth users, almos everything to the share
> where WKS have to retrive the file but is not working.
>
>
>
> could anybody know how this could be working?
>
>
>
> This is urgent, i will be pending of my email.
> --
> Antes que nadie, recuerda que cuentas contigo mismo.
> Herm 2009
> *
> ------------------------------
> *
>
> *Confidentiality Warning:* This message and any attachments are intended
> only for the use of the intended recipient(s), are confidential, and may be
> privileged. If you are not the intended recipient, you are hereby notified
> that any review, retransmission, conversion to hard copy, copying,
> circulation or other use of all or any portion of this message and any
> attachments is strictly prohibited. If you are not the intended recipient,
> please notify the sender immediately by return e-mail, and delete this
> message and any attachments from your system.
>
>
>
>
> --
> Antes que nadie, recuerda que cuentas contigo mismo.
> Herm 2009
>
>
>
>
> --
> Antes que nadie, recuerda que cuentas contigo mismo.
> Herm 2009
>
>
>
>
> --
> Antes que nadie, recuerda que cuentas contigo mismo.
> Herm 2009
>
--
Antes que nadie, recuerda que cuentas contigo mismo.
Herm 2009
| | | |
| JamieNelson
Posts:166
| | 04/06/2010 8:55 PM |
| Okay, yeah that is a pretty common thing. I am actually wondering why
you need to map a network drive to copy a file. Does using a UNC path
not work for you?
Jamie Nelson | Sr. Administrator | BI&T Infrastructure-Intel | Devon
Energy Corporation | Work: ' 405.552.8054 | Mobile: ' 405.248.7963 |
http://www.dvn.com <http://www.dvn.com/>
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Hector Rios
Sent: Tuesday, April 06, 2010 2:08 PM
To: xxxxxxxxxxxxxxxx
Subject: Re: [gptalk] Files are not copying through GPO
i gave domain computers fc permission and didnt work, HD want to have on
all Domain machines a special file to run in case they needed, the only
way to transfer that to all of them is a GPO.
to avoid user names and doing a mess with our currently logon script, i
decided to do that as an startup script.
thanks.
2010/4/6 Nelson, Jamie <xxxxxxxxxxxxxxxx>
If you have granted the computer object the required permissions, you
should be able to map the drive without having to provide a user's
credentials. Curious why you would need to do this in a startup script
though.
Jamie Nelson | Sr. Administrator | BI&T Infrastructure-Intel | Devon
Energy Corporation | Work: ' 405.552.8054 | Mobile: ' 405.248.7963 |
http://www.dvn.com <http://www.dvn.com/>
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Hector Rios
Sent: Tuesday, April 06, 2010 1:18 PM
To: xxxxxxxxxxxxxxxx
Subject: Re: [gptalk] Files are not copying through GPO
yes sr. i indluded /y. i just want to show you as simple as possible.
Now my script is working but i needed to map a network drive first with
any user credentials
could you let me know how to encrypt the password of that user to avoid
show that on the script?
thanks.
2010/4/6 Martin Hugo <xxxxxxxxxxxxxxxx>
Don't you need to include some switches to prevent prompting?
Martin T. Hugo
Network Administrator
Hilliard City Schools
Tel: 614-921-7102
________________________________
From: xxxxxxxxxxxxxxxx [xxxxxxxxxxxxxxxx] On
Behalf Of Hector Rios [xxxxxxxxxxxxxxxx]
Sent: Tuesday, April 06, 2010 1:16 PM
To: xxxxxxxxxxxxxxxx
Subject: Re: [gptalk] Files are not copying through GPO
Reading the file from the origin.
my script said
xcopy \\myserver\myshare\myfile <file:///\\myserver\myshare\myfile>
c:\dircreatedbyscript\myfile
it seems that user/computer at startup script is not allowed to access
my share.
2010/4/6 Dave Sharples <xxxxxxxxxxxxxxxx>
Denied on reading the file or writing to the local computer?
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Hector Rios
Sent: 06 April 2010 17:26
To: xxxxxxxxxxxxxxxx
Subject: Re: [gptalk] Files are not copying through GPO
i reviewed what andrew and you said, Network connection is not the
problem, i enabled to wait for a network connection, the message still
is Access Denied, i gave all necessary permissions you recommend me
Waiting more suggestions, i really appreciate your help
2010/4/6 Nelson, Jamie <xxxxxxxxxxxxxxxx>
Andrew is right on here. Sometimes Group Policy Processing (especially
scripts) gets in a race condition with the initiation of the network
connection. Setting this setting usually helps quite a bit. If you're
still having problems you might also look at the
GpNetworkStartTimeoutPolicyValue registry setting and see if it helps.
It is discussed in the following KB article.
http://support.microsoft.com/default.aspx?scid=kb;en-us;840669
Also make sure you haven't only set share permissions. When dealing with
Share/NTFS permissions, remember that the most restrictive will always
win out. To make it simple, I always give "Authenticated Users" modify
rights on the share, and then I use NTFS permissions to lock down
access.
So in your case, make sure you have Share permissions opened up as
widely as possible and make sure that "Domain Computers" has a minimum
of "Read" NTFS permissions.
Jamie Nelson | Sr. Administrator | BI&T Infrastructure-Intel | Devon
Energy Corporation | Work: ' 405.552.8054 | Mobile: ' 405.248.7963 |
http://www.dvn.com <http://www.dvn.com/>
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Andrew McHale
Sent: Tuesday, April 06, 2010 10:36 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Files are not copying through GPO
Hi Hector,
The script could be failing because the connection to the network has
not established yet. Do you set the "Always wait for network at computer
startup and logon" setting in your domain? It can be found under
"Computer Configuration\Administrative Templates\System\Logon\".
This would force the workstations to wait for the network connection to
establish before running any scripts, although it may increase the
system boot up time.
Hope this helps.
Andrew
From: Hector Rios [mailto:xxxxxxxxxxxxxxxx]
Sent: 06 April 2010 16:22
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] Files are not copying through GPO
Right now i have w2003 DC and XP wks, i want to copy a file to all wks
through gpo, my problem is that thorugh gpo the file is not copying to
the wks.
i have a little and easy CMD script that works if it is executed locally
from the WKS but if not working from my GPO
i have this as Startup script, i have read other forums and assigned
domain computers permission, everyone, auth users, almos everything to
the share where WKS have to retrive the file but is not working.
could anybody know how this could be working?
This is urgent, i will be pending of my email.
--
Antes que nadie, recuerda que cuentas contigo mismo.
Herm 2009
________________________________
Confidentiality Warning: This message and any attachments are intended
only for the use of the intended recipient(s), are confidential, and may
be privileged. If you are not the intended recipient, you are hereby
notified that any review, retransmission, conversion to hard copy,
copying, circulation or other use of all or any portion of this message
and any attachments is strictly prohibited. If you are not the intended
recipient, please notify the sender immediately by return e-mail, and
delete this message and any attachments from your system.
--
Antes que nadie, recuerda que cuentas contigo mismo.
Herm 2009
--
Antes que nadie, recuerda que cuentas contigo mismo.
Herm 2009
--
Antes que nadie, recuerda que cuentas contigo mismo.
Herm 2009
--
Antes que nadie, recuerda que cuentas contigo mismo.
Herm 2009
| | | |
| jeromelcruz
Posts:120
| | 04/06/2010 8:55 PM |
| Hector,
Do you have the option to just copy the file using Group Policy Preferences? That would totally eliminate the requirement for a startup script and reboots
Jerry Cruz | Group Policies Product Manager | Windows Server and Infrastructure Architecture
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Nelson, Jamie
Sent: Tuesday, April 06, 2010 12:28 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Files are not copying through GPO
Okay, yeah that is a pretty common thing. I am actually wondering why you need to map a network drive to copy a file. Does using a UNC path not work for you?
Jamie Nelson | Sr. Administrator | BI&T Infrastructure-Intel | Devon Energy Corporation | Work: ' 405.552.8054 | Mobile: ' 405.248.7963 | http://www.dvn.com<http://www.dvn.com/>
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Hector Rios
Sent: Tuesday, April 06, 2010 2:08 PM
To: xxxxxxxxxxxxxxxx
Subject: Re: [gptalk] Files are not copying through GPO
i gave domain computers fc permission and didnt work, HD want to have on all Domain machines a special file to run in case they needed, the only way to transfer that to all of them is a GPO.
to avoid user names and doing a mess with our currently logon script, i decided to do that as an startup script.
thanks.
2010/4/6 Nelson, Jamie <xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>>
If you have granted the computer object the required permissions, you should be able to map the drive without having to provide a user's credentials. Curious why you would need to do this in a startup script though.
Jamie Nelson | Sr. Administrator | BI&T Infrastructure-Intel | Devon Energy Corporation | Work: ' 405.552.8054 | Mobile: ' 405.248.7963 | http://www.dvn.com<http://www.dvn.com/>
From: xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx> [mailto:xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>] On Behalf Of Hector Rios
Sent: Tuesday, April 06, 2010 1:18 PM
To: xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>
Subject: Re: [gptalk] Files are not copying through GPO
yes sr. i indluded /y. i just want to show you as simple as possible.
Now my script is working but i needed to map a network drive first with any user credentials
could you let me know how to encrypt the password of that user to avoid show that on the script?
thanks.
2010/4/6 Martin Hugo <xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>>
Don't you need to include some switches to prevent prompting?
Martin T. Hugo
Network Administrator
Hilliard City Schools
Tel: 614-921-7102
________________________________
From: xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx> [xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>] On Behalf Of Hector Rios [xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>]
Sent: Tuesday, April 06, 2010 1:16 PM
To: xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>
Subject: Re: [gptalk] Files are not copying through GPO
Reading the file from the origin.
my script said
xcopy \\myserver\myshare\myfile<file:///\\myserver\myshare\myfile> c:\dircreatedbyscript\myfile
it seems that user/computer at startup script is not allowed to access my share.
2010/4/6 Dave Sharples <xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>>
Denied on reading the file or writing to the local computer?
From: xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx> [mailto:xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>] On Behalf Of Hector Rios
Sent: 06 April 2010 17:26
To: xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>
Subject: Re: [gptalk] Files are not copying through GPO
i reviewed what andrew and you said, Network connection is not the problem, i enabled to wait for a network connection, the message still is Access Denied, i gave all necessary permissions you recommend me
Waiting more suggestions, i really appreciate your help
2010/4/6 Nelson, Jamie <xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>>
Andrew is right on here. Sometimes Group Policy Processing (especially scripts) gets in a race condition with the initiation of the network connection. Setting this setting usually helps quite a bit. If you're still having problems you might also look at the GpNetworkStartTimeoutPolicyValue registry setting and see if it helps. It is discussed in the following KB article.
http://support.microsoft.com/default.aspx?scid=kb;en-us;840669
Also make sure you haven't only set share permissions. When dealing with Share/NTFS permissions, remember that the most restrictive will always win out. To make it simple, I always give "Authenticated Users" modify rights on the share, and then I use NTFS permissions to lock down access.
So in your case, make sure you have Share permissions opened up as widely as possible and make sure that "Domain Computers" has a minimum of "Read" NTFS permissions.
Jamie Nelson | Sr. Administrator | BI&T Infrastructure-Intel | Devon Energy Corporation | Work: ' 405.552.8054 | Mobile: ' 405.248.7963 | http://www.dvn.com<http://www.dvn.com/>
From: xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx> [mailto:xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>] On Behalf Of Andrew McHale
Sent: Tuesday, April 06, 2010 10:36 AM
To: xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>
Subject: RE: [gptalk] Files are not copying through GPO
Hi Hector,
The script could be failing because the connection to the network has not established yet. Do you set the "Always wait for network at computer startup and logon" setting in your domain? It can be found under "Computer Configuration\Administrative Templates\System\Logon\".
This would force the workstations to wait for the network connection to establish before running any scripts, although it may increase the system boot up time.
Hope this helps.
Andrew
From: Hector Rios [mailto:xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>]
Sent: 06 April 2010 16:22
To: xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>
Subject: [gptalk] Files are not copying through GPO
Right now i have w2003 DC and XP wks, i want to copy a file to all wks through gpo, my problem is that thorugh gpo the file is not copying to the wks.
i have a little and easy CMD script that works if it is executed locally from the WKS but if not working from my GPO
i have this as Startup script, i have read other forums and assigned domain computers permission, everyone, auth users, almos everything to the share where WKS have to retrive the file but is not working.
could anybody know how this could be working?
This is urgent, i will be pending of my email.
--
Antes que nadie, recuerda que cuentas contigo mismo.
Herm 2009
________________________________
Confidentiality Warning: This message and any attachments are intended only for the use of the intended recipient(s), are confidential, and may be privileged. If you are not the intended recipient, you are hereby notified that any review, retransmission, conversion to hard copy, copying, circulation or other use of all or any portion of this message and any attachments is strictly prohibited. If you are not the intended recipient, please notify the sender immediately by return e-mail, and delete this message and any attachments from your system.
--
Antes que nadie, recuerda que cuentas contigo mismo.
Herm 2009
--
Antes que nadie, recuerda que cuentas contigo mismo.
Herm 2009
--
Antes que nadie, recuerda que cuentas contigo mismo.
Herm 2009
--
Antes que nadie, recuerda que cuentas contigo mismo.
Herm 2009
| | | |
| hriosm
Posts:18
| | 04/06/2010 9:09 PM |
| no sr. i tried with UNC but didnt work, that was weird, but it was true. now
the only thing i need is to protect that script to not expose the password
of that user i used to map the network drive.
do you have any idea how to encrypt with net use?
2010/4/6 Nelson, Jamie <xxxxxxxxxxxxxxxx>
> Okay, yeah that is a pretty common thing. I am actually wondering why you
> need to map a network drive to copy a file. Does using a UNC path not work
> for you?
>
>
>
> *Jamie Nelson* | Sr. Administrator | BI&T Infrastructure-Intel | *Devon
> Energy Corporation* | Work: ' 405.552.8054 | Mobile: ' 405.248.7963 |
> http://www.dvn.com
>
>
>
> *From:* xxxxxxxxxxxxxxxx [mailto:
> xxxxxxxxxxxxxxxx] *On Behalf Of *Hector Rios
> *Sent:* Tuesday, April 06, 2010 2:08 PM
>
> *To:* xxxxxxxxxxxxxxxx
> *Subject:* Re: [gptalk] Files are not copying through GPO
>
>
>
> i gave domain computers fc permission and didnt work, HD want to have on
> all Domain machines a special file to run in case they needed, the only way
> to transfer that to all of them is a GPO.
>
>
>
> to avoid user names and doing a mess with our currently logon script, i
> decided to do that as an startup script.
>
>
>
> thanks.
>
> 2010/4/6 Nelson, Jamie <xxxxxxxxxxxxxxxx>
>
> If you have granted the computer object the required permissions, you
> should be able to map the drive without having to provide a user’s
> credentials. Curious why you would need to do this in a startup script
> though.
>
>
>
> *Jamie Nelson* | Sr. Administrator | BI&T Infrastructure-Intel | *Devon
> Energy Corporation* | Work: ' 405.552.8054 | Mobile: ' 405.248.7963 |
> http://www.dvn.com
>
>
>
> *From:* xxxxxxxxxxxxxxxx [mailto:
> xxxxxxxxxxxxxxxx] *On Behalf Of *Hector Rios
> *Sent:* Tuesday, April 06, 2010 1:18 PM
>
>
> *To:* xxxxxxxxxxxxxxxx
> *Subject:* Re: [gptalk] Files are not copying through GPO
>
>
>
> yes sr. i indluded /y. i just want to show you as simple as possible.
>
>
>
> Now my script is working but i needed to map a network drive first with any
> user credentials
>
> could you let me know how to encrypt the password of that user to avoid
> show that on the script?
>
>
>
> thanks.
>
> 2010/4/6 Martin Hugo <xxxxxxxxxxxxxxxx>
>
> Don't you need to include some switches to prevent prompting?
>
>
>
> Martin T. Hugo
>
> Network Administrator
>
> Hilliard City Schools
>
> Tel: 614-921-7102
> ------------------------------
>
> *From:* xxxxxxxxxxxxxxxx [xxxxxxxxxxxxxxxx] On
> Behalf Of Hector Rios [xxxxxxxxxxxxxxxx]
> *Sent:* Tuesday, April 06, 2010 1:16 PM
>
>
> *To:* xxxxxxxxxxxxxxxx
> *Subject:* Re: [gptalk] Files are not copying through GPO
>
>
>
> Reading the file from the origin.
>
>
>
> my script said
>
>
>
> xcopy \\myserver\myshare\myfile c:\dircreatedbyscript\myfile
>
>
>
> it seems that user/computer at startup script is not allowed to access my
> share.
>
>
>
>
>
> 2010/4/6 Dave Sharples <xxxxxxxxxxxxxxxx>
>
> Denied on reading the file or writing to the local computer?
>
>
>
> *From:* xxxxxxxxxxxxxxxx [mailto:
> xxxxxxxxxxxxxxxx] *On Behalf Of *Hector Rios
> *Sent:* 06 April 2010 17:26
>
>
> *To:* xxxxxxxxxxxxxxxx
>
> *Subject:* Re: [gptalk] Files are not copying through GPO
>
>
>
> i reviewed what andrew and you said, Network connection is not the problem,
> i enabled to wait for a network connection, the message still is Access
> Denied, i gave all necessary permissions you recommend me
>
>
>
> Waiting more suggestions, i really appreciate your help
>
> 2010/4/6 Nelson, Jamie <xxxxxxxxxxxxxxxx>
>
> Andrew is right on here. Sometimes Group Policy Processing (especially
> scripts) gets in a race condition with the initiation of the network
> connection. Setting this setting usually helps quite a bit. If you’re still
> having problems you might also look at the GpNetworkStartTimeoutPolicyValue
> registry setting and see if it helps. It is discussed in the following KB
> article.
>
>
>
> http://support.microsoft.com/default.aspx?scid=kb;en-us;840669
>
>
>
> Also make sure you haven’t only set share permissions. When dealing with
> Share/NTFS permissions, remember that the most restrictive will always win
> out. To make it simple, I always give “Authenticated Users” modify rights on
> the share, and then I use NTFS permissions to lock down access.
>
>
>
> So in your case, make sure you have Share permissions opened up as widely
> as possible and make sure that “Domain Computers” has a minimum of “Read”
> NTFS permissions.
>
>
>
>
>
> *Jamie Nelson* | Sr. Administrator | BI&T Infrastructure-Intel | *Devon
> Energy Corporation* | Work: ' 405.552.8054 | Mobile: ' 405.248.7963 |
> http://www.dvn.com
>
>
>
> *From:* xxxxxxxxxxxxxxxx [mailto:
> xxxxxxxxxxxxxxxx] *On Behalf Of *Andrew McHale
> *Sent:* Tuesday, April 06, 2010 10:36 AM
>
>
> *To:* xxxxxxxxxxxxxxxx
>
> *Subject:* RE: [gptalk] Files are not copying through GPO
>
>
>
> Hi Hector,
> The script could be failing because the connection to the network has not
> established yet. Do you set the "Always *wait for network* at computer
> startup and logon" setting in your domain? It can be found under “Computer
> Configuration\Administrative Templates\System\Logon\”. This would force
> the workstations to wait for the network connection to establish before
> running any scripts, although it may increase the system boot up time.
>
> Hope this helps.
>
>
>
> Andrew
>
>
>
> *From:* Hector Rios [mailto:xxxxxxxxxxxxxxxx]
> *Sent:* 06 April 2010 16:22
> *To:* xxxxxxxxxxxxxxxx
> *Subject:* [gptalk] Files are not copying through GPO
>
>
>
> Right now i have w2003 DC and XP wks, i want to copy a file to all wks
> through gpo, my problem is that thorugh gpo the file is not copying to the
> wks.
>
>
>
> i have a little and easy CMD script that works if it is executed locally
> from the WKS but if not working from my GPO
>
>
>
> i have this as Startup script, i have read other forums and assigned domain
> computers permission, everyone, auth users, almos everything to the share
> where WKS have to retrive the file but is not working.
>
>
>
> could anybody know how this could be working?
>
>
>
> This is urgent, i will be pending of my email.
> --
> Antes que nadie, recuerda que cuentas contigo mismo.
> Herm 2009
> *
> ------------------------------
> *
>
> *Confidentiality Warning:* This message and any attachments are intended
> only for the use of the intended recipient(s), are confidential, and may be
> privileged. If you are not the intended recipient, you are hereby notified
> that any review, retransmission, conversion to hard copy, copying,
> circulation or other use of all or any portion of this message and any
> attachments is strictly prohibited. If you are not the intended recipient,
> please notify the sender immediately by return e-mail, and delete this
> message and any attachments from your system.
>
>
>
>
> --
> Antes que nadie, recuerda que cuentas contigo mismo.
> Herm 2009
>
>
>
>
> --
> Antes que nadie, recuerda que cuentas contigo mismo.
> Herm 2009
>
>
>
>
> --
> Antes que nadie, recuerda que cuentas contigo mismo.
> Herm 2009
>
>
>
>
> --
> Antes que nadie, recuerda que cuentas contigo mismo.
> Herm 2009
>
--
Antes que nadie, recuerda que cuentas contigo mismo.
Herm 2009
| | | |
| JamieNelson
Posts:166
| | 04/06/2010 9:35 PM |
| Would it be possible for you to post the contents of the script? Please
change any environment specific information (server names, users, etc)
to protect your organization's privacy before doing so.
Did you also see Jerry's recommendation about using Group Policy
Preferences (GPP)? It would make what you're trying to do much simpler.
Jamie Nelson | Sr. Administrator | BI&T Infrastructure-Intel | Devon
Energy Corporation | Work: ' 405.552.8054 | Mobile: ' 405.248.7963 |
http://www.dvn.com <http://www.dvn.com/>
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Hector Rios
Sent: Tuesday, April 06, 2010 3:08 PM
To: xxxxxxxxxxxxxxxx
Subject: Re: [gptalk] Files are not copying through GPO
no sr. i tried with UNC but didnt work, that was weird, but it was true.
now the only thing i need is to protect that script to not expose the
password of that user i used to map the network drive.
do you have any idea how to encrypt with net use?
2010/4/6 Nelson, Jamie <xxxxxxxxxxxxxxxx>
Okay, yeah that is a pretty common thing. I am actually wondering why
you need to map a network drive to copy a file. Does using a UNC path
not work for you?
Jamie Nelson | Sr. Administrator | BI&T Infrastructure-Intel | Devon
Energy Corporation | Work: ' 405.552.8054 | Mobile: ' 405.248.7963 |
http://www.dvn.com <http://www.dvn.com/>
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Hector Rios
Sent: Tuesday, April 06, 2010 2:08 PM
To: xxxxxxxxxxxxxxxx
Subject: Re: [gptalk] Files are not copying through GPO
i gave domain computers fc permission and didnt work, HD want to have on
all Domain machines a special file to run in case they needed, the only
way to transfer that to all of them is a GPO.
to avoid user names and doing a mess with our currently logon script, i
decided to do that as an startup script.
thanks.
2010/4/6 Nelson, Jamie <xxxxxxxxxxxxxxxx>
If you have granted the computer object the required permissions, you
should be able to map the drive without having to provide a user's
credentials. Curious why you would need to do this in a startup script
though.
Jamie Nelson | Sr. Administrator | BI&T Infrastructure-Intel | Devon
Energy Corporation | Work: ' 405.552.8054 | Mobile: ' 405.248.7963 |
http://www.dvn.com <http://www.dvn.com/>
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Hector Rios
Sent: Tuesday, April 06, 2010 1:18 PM
To: xxxxxxxxxxxxxxxx
Subject: Re: [gptalk] Files are not copying through GPO
yes sr. i indluded /y. i just want to show you as simple as possible.
Now my script is working but i needed to map a network drive first with
any user credentials
could you let me know how to encrypt the password of that user to avoid
show that on the script?
thanks.
2010/4/6 Martin Hugo <xxxxxxxxxxxxxxxx>
Don't you need to include some switches to prevent prompting?
Martin T. Hugo
Network Administrator
Hilliard City Schools
Tel: 614-921-7102
________________________________
From: xxxxxxxxxxxxxxxx [xxxxxxxxxxxxxxxx] On
Behalf Of Hector Rios [xxxxxxxxxxxxxxxx]
Sent: Tuesday, April 06, 2010 1:16 PM
To: xxxxxxxxxxxxxxxx
Subject: Re: [gptalk] Files are not copying through GPO
Reading the file from the origin.
my script said
xcopy \\myserver\myshare\myfile <file:///\\myserver\myshare\myfile>
c:\dircreatedbyscript\myfile
it seems that user/computer at startup script is not allowed to access
my share.
2010/4/6 Dave Sharples <xxxxxxxxxxxxxxxx>
Denied on reading the file or writing to the local computer?
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Hector Rios
Sent: 06 April 2010 17:26
To: xxxxxxxxxxxxxxxx
Subject: Re: [gptalk] Files are not copying through GPO
i reviewed what andrew and you said, Network connection is not the
problem, i enabled to wait for a network connection, the message still
is Access Denied, i gave all necessary permissions you recommend me
Waiting more suggestions, i really appreciate your help
2010/4/6 Nelson, Jamie <xxxxxxxxxxxxxxxx>
Andrew is right on here. Sometimes Group Policy Processing (especially
scripts) gets in a race condition with the initiation of the network
connection. Setting this setting usually helps quite a bit. If you're
still having problems you might also look at the
GpNetworkStartTimeoutPolicyValue registry setting and see if it helps.
It is discussed in the following KB article.
http://support.microsoft.com/default.aspx?scid=kb;en-us;840669
Also make sure you haven't only set share permissions. When dealing with
Share/NTFS permissions, remember that the most restrictive will always
win out. To make it simple, I always give "Authenticated Users" modify
rights on the share, and then I use NTFS permissions to lock down
access.
So in your case, make sure you have Share permissions opened up as
widely as possible and make sure that "Domain Computers" has a minimum
of "Read" NTFS permissions.
Jamie Nelson | Sr. Administrator | BI&T Infrastructure-Intel | Devon
Energy Corporation | Work: ' 405.552.8054 | Mobile: ' 405.248.7963 |
http://www.dvn.com <http://www.dvn.com/>
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Andrew McHale
Sent: Tuesday, April 06, 2010 10:36 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Files are not copying through GPO
Hi Hector,
The script could be failing because the connection to the network has
not established yet. Do you set the "Always wait for network at computer
startup and logon" setting in your domain? It can be found under
"Computer Configuration\Administrative Templates\System\Logon\".
This would force the workstations to wait for the network connection to
establish before running any scripts, although it may increase the
system boot up time.
Hope this helps.
Andrew
From: Hector Rios [mailto:xxxxxxxxxxxxxxxx]
Sent: 06 April 2010 16:22
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] Files are not copying through GPO
Right now i have w2003 DC and XP wks, i want to copy a file to all wks
through gpo, my problem is that thorugh gpo the file is not copying to
the wks.
i have a little and easy CMD script that works if it is executed locally
from the WKS but if not working from my GPO
i have this as Startup script, i have read other forums and assigned
domain computers permission, everyone, auth users, almos everything to
the share where WKS have to retrive the file but is not working.
could anybody know how this could be working?
This is urgent, i will be pending of my email.
--
Antes que nadie, recuerda que cuentas contigo mismo.
Herm 2009
________________________________
Confidentiality Warning: This message and any attachments are intended
only for the use of the intended recipient(s), are confidential, and may
be privileged. If you are not the intended recipient, you are hereby
notified that any review, retransmission, conversion to hard copy,
copying, circulation or other use of all or any portion of this message
and any attachments is strictly prohibited. If you are not the intended
recipient, please notify the sender immediately by return e-mail, and
delete this message and any attachments from your system.
--
Antes que nadie, recuerda que cuentas contigo mismo.
Herm 2009
--
Antes que nadie, recuerda que cuentas contigo mismo.
Herm 2009
--
Antes que nadie, recuerda que cuentas contigo mismo.
Herm 2009
--
Antes que nadie, recuerda que cuentas contigo mismo.
Herm 2009
--
Antes que nadie, recuerda que cuentas contigo mismo.
Herm 2009
| | | |
| frevere
Posts:18
| | 04/06/2010 9:46 PM |
| Hector,
The following script has always worked for me. Substitute {directory}
as the destination directory, and {servername}\{share} as the network
location of the file. I ran this from the computer
configuration\scripts\startup since the file needed to be on every
computer no matter the user.
Dim objFSO, WshNetwork
Const OverwriteExisting = True
Set objFSO = CreateObject("Scripting.FileSystemObject")
Set WshNetwork = Createobject("Wscript.Network")
strComputer = WshNetwork.Computername
wsLocation = "C:\{directory}\"
objFSO.CopyFile "\\{servername{\{share}", wsLocation, OverwriteExisting
________________________________
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Nelson, Jamie
Sent: Tuesday, April 06, 2010 4:21 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Files are not copying through GPO
Would it be possible for you to post the contents of the script?
Please change any environment specific information (server names, users,
etc) to protect your organization's privacy before doing so.
Did you also see Jerry's recommendation about using Group Policy
Preferences (GPP)? It would make what you're trying to do much simpler.
Jamie Nelson | Sr. Administrator | BI&T Infrastructure-Intel |
Devon Energy Corporation | Work: ' 405.552.8054 | Mobile: ' 405.248.7963
| http://www.dvn.com <http://www.dvn.com/>
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Hector Rios
Sent: Tuesday, April 06, 2010 3:08 PM
To: xxxxxxxxxxxxxxxx
Subject: Re: [gptalk] Files are not copying through GPO
no sr. i tried with UNC but didnt work, that was weird, but it
was true. now the only thing i need is to protect that script to not
expose the password of that user i used to map the network drive.
do you have any idea how to encrypt with net use?
2010/4/6 Nelson, Jamie <xxxxxxxxxxxxxxxx>
Okay, yeah that is a pretty common thing. I am actually
wondering why you need to map a network drive to copy a file. Does using
a UNC path not work for you?
Jamie Nelson | Sr. Administrator | BI&T Infrastructure-Intel |
Devon Energy Corporation | Work: ' 405.552.8054 | Mobile: ' 405.248.7963
| http://www.dvn.com <http://www.dvn.com/>
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Hector Rios
Sent: Tuesday, April 06, 2010 2:08 PM
To: xxxxxxxxxxxxxxxx
Subject: Re: [gptalk] Files are not copying through GPO
i gave domain computers fc permission and didnt work, HD want to
have on all Domain machines a special file to run in case they needed,
the only way to transfer that to all of them is a GPO.
to avoid user names and doing a mess with our currently logon
script, i decided to do that as an startup script.
thanks.
2010/4/6 Nelson, Jamie <xxxxxxxxxxxxxxxx>
If you have granted the computer object the required
permissions, you should be able to map the drive without having to
provide a user's credentials. Curious why you would need to do this in a
startup script though.
Jamie Nelson | Sr. Administrator | BI&T Infrastructure-Intel |
Devon Energy Corporation | Work: ' 405.552.8054 | Mobile: ' 405.248.7963
| http://www.dvn.com <http://www.dvn.com/>
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Hector Rios
Sent: Tuesday, April 06, 2010 1:18 PM
To: xxxxxxxxxxxxxxxx
Subject: Re: [gptalk] Files are not copying through GPO
yes sr. i indluded /y. i just want to show you as simple as
possible.
Now my script is working but i needed to map a network drive
first with any user credentials
could you let me know how to encrypt the password of that user
to avoid show that on the script?
thanks.
2010/4/6 Martin Hugo <xxxxxxxxxxxxxxxx>
Don't you need to include some switches to prevent prompting?
Martin T. Hugo
Network Administrator
Hilliard City Schools
Tel: 614-921-7102
________________________________
From: xxxxxxxxxxxxxxxx
[xxxxxxxxxxxxxxxx] On Behalf Of Hector Rios
[xxxxxxxxxxxxxxxx]
Sent: Tuesday, April 06, 2010 1:16 PM
To: xxxxxxxxxxxxxxxx
Subject: Re: [gptalk] Files are not copying through GPO
Reading the file from the origin.
my script said
xcopy \\myserver\myshare\myfile
<file:///\\myserver\myshare\myfile> c:\dircreatedbyscript\myfile
it seems that user/computer at startup script is not allowed to
access my share.
2010/4/6 Dave Sharples <xxxxxxxxxxxxxxxx>
Denied on reading the file or writing to the local computer?
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Hector Rios
Sent: 06 April 2010 17:26
To: xxxxxxxxxxxxxxxx
Subject: Re: [gptalk] Files are not copying through GPO
i reviewed what andrew and you said, Network connection is not
the problem, i enabled to wait for a network connection, the message
still is Access Denied, i gave all necessary permissions you recommend
me
Waiting more suggestions, i really appreciate your help
2010/4/6 Nelson, Jamie <xxxxxxxxxxxxxxxx>
Andrew is right on here. Sometimes Group Policy Processing
(especially scripts) gets in a race condition with the initiation of the
network connection. Setting this setting usually helps quite a bit. If
you're still having problems you might also look at the
GpNetworkStartTimeoutPolicyValue registry setting and see if it helps.
It is discussed in the following KB article.
http://support.microsoft.com/default.aspx?scid=kb;en-us;840669
Also make sure you haven't only set share permissions. When
dealing with Share/NTFS permissions, remember that the most restrictive
will always win out. To make it simple, I always give "Authenticated
Users" modify rights on the share, and then I use NTFS permissions to
lock down access.
So in your case, make sure you have Share permissions opened up
as widely as possible and make sure that "Domain Computers" has a
minimum of "Read" NTFS permissions.
Jamie Nelson | Sr. Administrator | BI&T Infrastructure-Intel |
Devon Energy Corporation | Work: ' 405.552.8054 | Mobile: ' 405.248.7963
| http://www.dvn.com <http://www.dvn.com/>
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Andrew McHale
Sent: Tuesday, April 06, 2010 10:36 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Files are not copying through GPO
Hi Hector,
The script could be failing because the connection to the
network has not established yet. Do you set the "Always wait for network
at computer startup and logon" setting in your domain? It can be found
under "Computer Configuration\Administrative Templates\System\Logon\".
This would force the workstations to wait for the network
connection to establish before running any scripts, although it may
increase the system boot up time.
Hope this helps.
Andrew
From: Hector Rios [mailto:xxxxxxxxxxxxxxxx]
Sent: 06 April 2010 16:22
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] Files are not copying through GPO
Right now i have w2003 DC and XP wks, i want to copy a file to
all wks through gpo, my problem is that thorugh gpo the file is not
copying to the wks.
i have a little and easy CMD script that works if it is executed
locally from the WKS but if not working from my GPO
i have this as Startup script, i have read other forums and
assigned domain computers permission, everyone, auth users, almos
everything to the share where WKS have to retrive the file but is not
working.
could anybody know how this could be working?
This is urgent, i will be pending of my email.
--
Antes que nadie, recuerda que cuentas contigo mismo.
Herm 2009
________________________________
Confidentiality Warning: This message and any attachments are
intended only for the use of the intended recipient(s), are
confidential, and may be privileged. If you are not the intended
recipient, you are hereby notified that any review, retransmission,
conversion to hard copy, copying, circulation or other use of all or any
portion of this message and any attachments is strictly prohibited. If
you are not the intended recipient, please notify the sender immediately
by return e-mail, and delete this message and any attachments from your
system.
--
Antes que nadie, recuerda que cuentas contigo mismo.
Herm 2009
--
Antes que nadie, recuerda que cuentas contigo mismo.
Herm 2009
--
Antes que nadie, recuerda que cuentas contigo mismo.
Herm 2009
--
Antes que nadie, recuerda que cuentas contigo mismo.
Herm 2009
--
Antes que nadie, recuerda que cuentas contigo mismo.
Herm 2009
| | | |
|
|