| Author | Messages | |
Fenixdood
Posts:10
 | | 03/16/2009 2:44 PM |
| Hi,
perhaps you can help.
I have a VBS file that when run from command is fine. The Script installs
office 2007 setup.exe.But when I use it as a start up script some of the
functions run but the actual setup.exe does not run. the gpresult shows the
gpo was applied. I have given access to the gpo software folder using
"domain computers" being that the script will run as the system account.
Still i do suspect a permissions issue.
I have the script residing in the netlogon directory and am pointing to it
in the startup script.
Will provided any other info needed to solve this.
Thanks in advance.
Ron
| | | |
| MikeWLindsay
Posts:3
| | 03/16/2009 2:58 PM |
| Hi Ron,
Don't know if this will be helpful or not, but can relay my experiences using Computer Startup Scripts.
Computer startup scripts run as local system account, so if your using a share, need to pay special attention to permissions on the share/files. The local system account accesses shares using the computer object. When I have to test those types of things, and run them through a command window, I spawn the command window under the local system account. That helps me pin down any issues.
Googling "running cmd exe as a local system" gets a lot of relevant hits. The one I use and would of linked on the MSDN blog appears to be not responding, of course  linked here for posterity's sake.
http://blogs.msdn.com/adioltean/articles/271063.aspx
basically that one just installs a service, then if I run the service, the service itself failes, but it spawns a LSA command window.
From: fenixdood [mailto:xxxxxxxxxxxxxxxx]
Sent: Monday, March 16, 2009 11:38 AM
To: <xxxxxxxxxxxxxxxx>
Subject: [gptalk] Startup Script
Hi,
perhaps you can help.
I have a VBS file that when run from command is fine. The Script installs office 2007 setup.exe.But when I use it as a start up script some of the functions run but the actual setup.exe does not run. the gpresult shows the gpo was applied. I have given access to the gpo software folder using "domain computers" being that the script will run as the system account. Still i do suspect a permissions issue.
I have the script residing in the netlogon directory and am pointing to it in the startup script.
Will provided any other info needed to solve this.
Thanks in advance.
Ron
| | | |
| Fenixdood
Posts:10
| | 03/16/2009 4:10 PM |
| Thanks for the help..I have tried to run the script within a LSA Cmd
window.. no luck.. but no error msg either. So how do I know where it fails.
I have given the domain computers group full access to the share on the
network. I am stumped as to what permission I need to give in oder for the
LSA to grab hold of a network share setup file..
Still searching
Thanks
Ron
On Mon, Mar 16, 2009 at 2:52 PM, Mike W LINDSAY
<xxxxxxxxxxxxxxxx>wrote:
> Hi Ron,
>
> Don't know if this will be helpful or not, but can relay my experiences
> using Computer Startup Scripts.
>
> Computer startup scripts run as local system account, so if your using a
> share, need to pay special attention to permissions on the share/files. The
> local system account accesses shares using the computer object. When I have
> to test those types of things, and run them through a command window, I
> spawn the command window under the local system account. That helps me pin
> down any issues.
>
> Googling "running cmd exe as a local system" gets a lot of relevant hits.
> The one I use and would of linked on the MSDN blog appears to be not
> responding, of course linked here for posterity's sake.
>
> http://blogs.msdn.com/adioltean/articles/271063.aspx
>
> basically that one just installs a service, then if I run the service, the
> service itself failes, but it spawns a LSA command window.
>
> If you make a service set to manual, have it run "cmd /K start" then in the
> logon, make sure its using the LSA and it can interact with desktop.
>
> Hope anything in there is helpful
>
> Mike
>
> ------------------------------
> *From:* fenixdood [mailto:xxxxxxxxxxxxxxxx]
> *Sent:* Monday, March 16, 2009 11:38 AM
> *To:* <xxxxxxxxxxxxxxxx>
> *Subject:* [gptalk] Startup Script
>
> Hi,
>
> perhaps you can help.
>
> I have a VBS file that when run from command is fine. The Script installs
> office 2007 setup.exe.But when I use it as a start up script some of the
> functions run but the actual setup.exe does not run. the gpresult shows the
> gpo was applied. I have given access to the gpo software folder using
> "domain computers" being that the script will run as the system account.
> Still i do suspect a permissions issue.
>
> I have the script residing in the netlogon directory and am pointing to it
> in the startup script.
>
> Will provided any other info needed to solve this.
>
> Thanks in advance.
>
> Ron
>
>
>
| | | |
| Darren
Posts:103
| | 03/16/2009 4:19 PM |
| I also use (on pre-Vista systems) the AT.exe command-line to spawn a
command-shell as LocalSystem. Pretty easy to do.
In terms of determining where the script is failing, it might be worth
posting your script here, if you can, to see if anything stands out.
Darren
www.gpoguy.com
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of fenixdood
Sent: Monday, March 16, 2009 1:05 PM
To: xxxxxxxxxxxxxxxx
Subject: Re: [gptalk] Startup Script
Thanks for the help..I have tried to run the script within a LSA Cmd
window.. no luck.. but no error msg either. So how do I know where it fails.
I have given the domain computers group full access to the share on the
network. I am stumped as to what permission I need to give in oder for the
LSA to grab hold of a network share setup file..
Still searching
Thanks
Ron
On Mon, Mar 16, 2009 at 2:52 PM, Mike W LINDSAY <xxxxxxxxxxxxxxxx>
wrote:
Hi Ron,
Don't know if this will be helpful or not, but can relay my experiences
using Computer Startup Scripts.
Computer startup scripts run as local system account, so if your using a
share, need to pay special attention to permissions on the share/files. The
local system account accesses shares using the computer object. When I have
to test those types of things, and run them through a command window, I
spawn the command window under the local system account. That helps me pin
down any issues.
Googling "running cmd exe as a local system" gets a lot of relevant hits.
The one I use and would of linked on the MSDN blog appears to be not
responding, of course linked here for posterity's sake.
http://blogs.msdn.com/adioltean/articles/271063.aspx
basically that one just installs a service, then if I run the service, the
service itself failes, but it spawns a LSA command window.
If you make a service set to manual, have it run "cmd /K start" then in the
logon, make sure its using the LSA and it can interact with desktop.
Hope anything in there is helpful
Mike
_____
From: fenixdood [mailto:xxxxxxxxxxxxxxxx]
Sent: Monday, March 16, 2009 11:38 AM
To: <xxxxxxxxxxxxxxxx>
Subject: [gptalk] Startup Script
Hi,
perhaps you can help.
I have a VBS file that when run from command is fine. The Script installs
office 2007 setup.exe.But when I use it as a start up script some of the
functions run but the actual setup.exe does not run. the gpresult shows the
gpo was applied. I have given access to the gpo software folder using
"domain computers" being that the script will run as the system account.
Still i do suspect a permissions issue.
I have the script residing in the netlogon directory and am pointing to it
in the startup script.
Will provided any other info needed to solve this.
Thanks in advance.
Ron
| | | |
| MikeWLindsay
Posts:3
| | 03/16/2009 4:31 PM |
| I know in my case, I had to grant "domain computers" access to the share, and NTFS file permissions. An end result of that was I opened up my shares, and just used NTFS permissions to control access.
Hard to say with out seeing your script, but are you checking for the existence of the file before you run your setup file? Does your script itself log? In most of my scripts (I use autoit), I have them all logging stuff on their own, on top of whatever setup.exe or msiexec logging for the specific program logs.
From: "Darren Mar-Elia" [mailto:xxxxxxxxxxxxxxxx]
Sent: Monday, March 16, 2009 1:14 PM
To: <xxxxxxxxxxxxxxxx>
Subject: RE: [gptalk] Startup Script
I also use (on pre-Vista systems) the AT.exe command-line to spawn a command-shell as LocalSystem. Pretty easy to do.
In terms of determining where the script is failing, it might be worth posting your script here, if you can, to see if anything stands out.
Darren
www.gpoguy.com
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of fenixdood
Sent: Monday, March 16, 2009 1:05 PM
To: xxxxxxxxxxxxxxxx
Subject: Re: [gptalk] Startup Script
Thanks for the help..I have tried to run the script within a LSA Cmd window.. no luck.. but no error msg either. So how do I know where it fails. I have given the domain computers group full access to the share on the network. I am stumped as to what permission I need to give in oder for the LSA to grab hold of a network share setup file..
Still searching
Thanks
Ron
On Mon, Mar 16, 2009 at 2:52 PM, Mike W LINDSAY <xxxxxxxxxxxxxxxx> wrote:
Hi Ron,
Don't know if this will be helpful or not, but can relay my experiences using Computer Startup Scripts.
Computer startup scripts run as local system account, so if your using a share, need to pay special attention to permissions on the share/files. The local system account accesses shares using the computer object. When I have to test those types of things, and run them through a command window, I spawn the command window under the local system account. That helps me pin down any issues.
Googling "running cmd exe as a local system" gets a lot of relevant hits. The one I use and would of linked on the MSDN blog appears to be not responding, of course linked here for posterity's sake.
http://blogs.msdn.com/adioltean/articles/271063.aspx
basically that one just installs a service, then if I run the service, the service itself failes, but it spawns a LSA command window.
If you make a service set to manual, have it run "cmd /K start" then in the logon, make sure its using the LSA and it can interact with desktop.
Hope anything in there is helpful
Mike
From: fenixdood [mailto:xxxxxxxxxxxxxxxx]
Sent: Monday, March 16, 2009 11:38 AM
To: <xxxxxxxxxxxxxxxx>
Subject: [gptalk] Startup Script
Hi,
perhaps you can help.
I have a VBS file that when run from command is fine. The Script installs office 2007 setup.exe.But when I use it as a start up script some of the functions run but the actual setup.exe does not run. the gpresult shows the gpo was applied. I have given access to the gpo software folder using "domain computers" being that the script will run as the system account. Still i do suspect a permissions issue.
I have the script residing in the netlogon directory and am pointing to it in the startup script.
Will provided any other info needed to solve this.
Thanks in advance.
Ron
| | | |
| tconnell
Posts:16
| | 03/16/2009 5:02 PM |
| Ron- Don't know if this is your issue but I had a similar problem once and I kept thinking it must be a permission thing but actually it turned out to be much simpler. I fixed it by pointing to the fully qualified domain name of the server and share and bingo it kicked in. It somehow was related to the fact that the share was on a member server as opposed to a domain controller.
In any case this worked:
\\server.contoso.com\share\setup.exe<file://\\server.contoso.com\share\setup.exe> /q etc.
and this did not:
\\server\share\setup.exe<file://\\server\share\setup.exe> /q etc.
Todd
________________________________
From: xxxxxxxxxxxxxxxx [xxxxxxxxxxxxxxxx] On Behalf Of Darren Mar-Elia [xxxxxxxxxxxxxxxx]
Sent: Monday, March 16, 2009 4:13 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Startup Script
I also use (on pre-Vista systems) the AT.exe command-line to spawn a command-shell as LocalSystem. Pretty easy to do.
In terms of determining where the script is failing, it might be worth posting your script here, if you can, to see if anything stands out.
Darren
www.gpoguy.com<http://www.gpoguy.com>
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of fenixdood
Sent: Monday, March 16, 2009 1:05 PM
To: xxxxxxxxxxxxxxxx
Subject: Re: [gptalk] Startup Script
Thanks for the help..I have tried to run the script within a LSA Cmd window.. no luck.. but no error msg either. So how do I know where it fails. I have given the domain computers group full access to the share on the network. I am stumped as to what permission I need to give in oder for the LSA to grab hold of a network share setup file..
Still searching
Thanks
Ron
On Mon, Mar 16, 2009 at 2:52 PM, Mike W LINDSAY <xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>> wrote:
Hi Ron,
Don't know if this will be helpful or not, but can relay my experiences using Computer Startup Scripts.
Computer startup scripts run as local system account, so if your using a share, need to pay special attention to permissions on the share/files. The local system account accesses shares using the computer object. When I have to test those types of things, and run them through a command window, I spawn the command window under the local system account. That helps me pin down any issues.
Googling "running cmd exe as a local system" gets a lot of relevant hits. The one I use and would of linked on the MSDN blog appears to be not responding, of course linked here for posterity's sake.
http://blogs.msdn.com/adioltean/articles/271063.aspx
basically that one just installs a service, then if I run the service, the service itself failes, but it spawns a LSA command window.
If you make a service set to manual, have it run "cmd /K start" then in the logon, make sure its using the LSA and it can interact with desktop.
Hope anything in there is helpful
Mike
________________________________
From: fenixdood [mailto:xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>]
Sent: Monday, March 16, 2009 11:38 AM
To: <xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>>
Subject: [gptalk] Startup Script
Hi,
perhaps you can help.
I have a VBS file that when run from command is fine. The Script installs office 2007 setup.exe.But when I use it as a start up script some of the functions run but the actual setup.exe does not run. the gpresult shows the gpo was applied. I have given access to the gpo software folder using "domain computers" being that the script will run as the system account. Still i do suspect a permissions issue.
I have the script residing in the netlogon directory and am pointing to it in the startup script.
Will provided any other info needed to solve this.
Thanks in advance.
Ron
________________________________
*NOTICE: This e-mail message is for the sole use of the intended recipient(s) and may contain certain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by e-mail and delete all copies of the original message. - Copyright © 2009 Levittown Public Schools - All rights reserved.
| | | |
| Fenixdood
Posts:10
| | 03/17/2009 1:26 PM |
| Hi,
Things are now working, what i did was test using the lsa cmd.I got an
access denied message.So looking at my script i change the path from ip to
hostname.dont know why this was an issue but all is well. the startup script
did not like th IP path at all. Todd your advice got me to this point.
thanks much..
Ron
On Mon, Mar 16, 2009 at 4:56 PM, Connell, Todd F. <
xxxxxxxxxxxxxxxx> wrote:
> Ron- Don't know if this is your issue but I had a similar problem once
> and I kept thinking it must be a permission thing but actually it turned out
> to be much simpler. I fixed it by pointing to the fully qualified domain
> name of the server and share and bingo it kicked in. It somehow was related
> to the fact that the share was on a member server as opposed to a domain
> controller.
>
> In any case* this worked:*
> \\server.contoso.com\share\setup.exe /q etc.
> and *this did not*:
> \\server\share\setup.exe /q etc.
>
> Todd
>
> ------------------------------
> *From:* xxxxxxxxxxxxxxxx [xxxxxxxxxxxxxxxx] On
> Behalf Of Darren Mar-Elia [xxxxxxxxxxxxxxxx]
> *Sent:* Monday, March 16, 2009 4:13 PM
> *To:* xxxxxxxxxxxxxxxx
> *Subject:* RE: [gptalk] Startup Script
>
> I also use (on pre-Vista systems) the AT.exe command-line to spawn a
> command-shell as LocalSystem. Pretty easy to do.
>
>
>
> In terms of determining where the script is failing, it might be worth
> posting your script here, if you can, to see if anything stands out.
>
>
>
> Darren
>
> www.gpoguy.com
>
>
>
>
>
>
>
> *From:* xxxxxxxxxxxxxxxx [mailto:
> xxxxxxxxxxxxxxxx] *On Behalf Of *fenixdood
> *Sent:* Monday, March 16, 2009 1:05 PM
> *To:* xxxxxxxxxxxxxxxx
> *Subject:* Re: [gptalk] Startup Script
>
>
>
> Thanks for the help..I have tried to run the script within a LSA Cmd
> window.. no luck.. but no error msg either. So how do I know where it fails.
> I have given the domain computers group full access to the share on the
> network. I am stumped as to what permission I need to give in oder for the
> LSA to grab hold of a network share setup file..
>
>
>
> Still searching
>
>
>
> Thanks
>
> Ron
>
> On Mon, Mar 16, 2009 at 2:52 PM, Mike W LINDSAY <
> xxxxxxxxxxxxxxxx> wrote:
>
> Hi Ron,
>
>
>
> Don't know if this will be helpful or not, but can relay my experiences
> using Computer Startup Scripts.
>
>
>
> Computer startup scripts run as local system account, so if your using a
> share, need to pay special attention to permissions on the share/files. The
> local system account accesses shares using the computer object. When I have
> to test those types of things, and run them through a command window, I
> spawn the command window under the local system account. That helps me pin
> down any issues.
>
>
>
> Googling "running cmd exe as a local system" gets a lot of relevant hits.
> The one I use and would of linked on the MSDN blog appears to be not
> responding, of course linked here for posterity's sake.
>
>
>
> http://blogs.msdn.com/adioltean/articles/271063.aspx
>
>
>
> basically that one just installs a service, then if I run the service, the
> service itself failes, but it spawns a LSA command window.
>
>
>
> If you make a service set to manual, have it run "cmd /K start" then in the
> logon, make sure its using the LSA and it can interact with desktop.
>
>
>
> Hope anything in there is helpful
>
>
>
> Mike
>
>
> ------------------------------
>
> *From:* fenixdood [mailto:xxxxxxxxxxxxxxxx]
> *Sent:* Monday, March 16, 2009 11:38 AM
> *To:* <xxxxxxxxxxxxxxxx>
> *Subject:* [gptalk] Startup Script
>
> Hi,
>
>
>
> perhaps you can help.
>
>
>
> I have a VBS file that when run from command is fine. The Script installs
> office 2007 setup.exe.But when I use it as a start up script some of the
> functions run but the actual setup.exe does not run. the gpresult shows the
> gpo was applied. I have given access to the gpo software folder using
> "domain computers" being that the script will run as the system account.
> Still i do suspect a permissions issue.
>
>
>
> I have the script residing in the netlogon directory and am pointing to it
> in the startup script.
>
>
>
> Will provided any other info needed to solve this.
>
>
>
> Thanks in advance.
>
>
>
> Ron
>
>
>
>
>
>
>
> ------------------------------
> *NOTICE: This e-mail message is for the sole use of the intended
> recipient(s) and may contain certain confidential and privileged
> information. Any unauthorized review, use, disclosure or distribution is
> prohibited. If you are not the intended recipient, please contact the sender
> by e-mail and delete all copies of the original message. - Copyright © 2009
> Levittown Public Schools - All rights reserved.
>
| | | |
|
|