|
server
newsgroups
|
|||||||||||||||||||||||
|
|||||||||||||||||||||||
Group Policy - Shutdown/Startup Scripts QuestionHello,
I have configured a GPO to run simple batch-style shutdown and startup scripts on all computers and have linked the GPO to the appropriate OU in my AD domain. I tested the scripts with my own local PC in a test OU first and everything worked perfectly- both scripts executed. Now that I have implemented these scripts in my production environment, however, I notice that when a production server restarts, only one of the 2 scripts is running and neither consistently; some of the servers run the shutdown script and not the startup one, and some will run the startup script and not the shutdown one. Does anybody have suggestions on how I can resolve this issue? Thanks in advance, Jon Jon,
What t/s steps have you already taken? Have you looked in the event logs on any of the clients? Have you looked at RSOP (Resultant Set of Policies)? Do you have the GPMC installed? This often helps? How is DNS configured in your environment? Are both Domain Controllers (making an assumption here) also DNS Servers? And do the clients have the correct IP Lease information? I just want to check the basics. -- Show quoteHide quoteCary W. Shultz Roanoke, VA 24012 "Jon Urso" <JonU***@discussions.microsoft.com> wrote in message news:B221BD76-698D-4993-877E-6D9389C61449@microsoft.com... > Hello, > > I have configured a GPO to run simple batch-style shutdown and startup > scripts on all computers and have linked the GPO to the appropriate OU in > my > AD domain. I tested the scripts with my own local PC in a test OU first > and > everything worked perfectly- both scripts executed. > > Now that I have implemented these scripts in my production environment, > however, I notice that when a production server restarts, only one of the > 2 > scripts is running and neither consistently; some of the servers run the > shutdown script and not the startup one, and some will run the startup > script > and not the shutdown one. > > Does anybody have suggestions on how I can resolve this issue? > > Thanks in advance, > > Jon Hi,
Also, Startup and Shutdown scripts run with System permissions on the local computer, but the permissions of the computer object in the domain. A script that works with your credentials may not work if the computer object lacks permission. You may need to grant "Domain Computers" permissions. Show quoteHide quote "Cary Shultz" <cwshu***@mvps.org> wrote in message news:uokgMn8IGHA.2928@TK2MSFTNGP10.phx.gbl... > Jon, > > What t/s steps have you already taken? Have you looked in the event logs > on any of the clients? Have you looked at RSOP (Resultant Set of > Policies)? Do you have the GPMC installed? This often helps? > > How is DNS configured in your environment? Are both Domain Controllers > (making an assumption here) also DNS Servers? And do the clients have the > correct IP Lease information? I just want to check the basics. > > -- > Cary W. Shultz > Roanoke, VA 24012 > > "Jon Urso" <JonU***@discussions.microsoft.com> wrote in message > news:B221BD76-698D-4993-877E-6D9389C61449@microsoft.com... >> Hello, >> >> I have configured a GPO to run simple batch-style shutdown and startup >> scripts on all computers and have linked the GPO to the appropriate OU in >> my >> AD domain. I tested the scripts with my own local PC in a test OU first >> and >> everything worked perfectly- both scripts executed. >> >> Now that I have implemented these scripts in my production environment, >> however, I notice that when a production server restarts, only one of the >> 2 >> scripts is running and neither consistently; some of the servers run the >> shutdown script and not the startup one, and some will run the startup >> script >> and not the shutdown one. >> >> Does anybody have suggestions on how I can resolve this issue? >> >> Thanks in advance, >> >> Jon > > Jeez!
Thanks for mentioning this, Richard. I am leaving off the 'basics'. I guess what is clear to me is not clear to everyone. And, like my wife, not many people can read my mind!!! ;-) -- Show quoteHide quoteCary W. Shultz Roanoke, VA 24012 "Richard Mueller" <rlmueller-NOSPAM@ameritech.NOSPAM.net> wrote in message news:uEW8AhDJGHA.596@TK2MSFTNGP10.phx.gbl... > Hi, > > Also, Startup and Shutdown scripts run with System permissions on the > local computer, but the permissions of the computer object in the domain. > A script that works with your credentials may not work if the computer > object lacks permission. You may need to grant "Domain Computers" > permissions. > > -- > Richard > Microsoft MVP Scripting and ADSI > Hilltop Lab - http://www.rlmueller.net > > "Cary Shultz" <cwshu***@mvps.org> wrote in message > news:uokgMn8IGHA.2928@TK2MSFTNGP10.phx.gbl... >> Jon, >> >> What t/s steps have you already taken? Have you looked in the event logs >> on any of the clients? Have you looked at RSOP (Resultant Set of >> Policies)? Do you have the GPMC installed? This often helps? >> >> How is DNS configured in your environment? Are both Domain Controllers >> (making an assumption here) also DNS Servers? And do the clients have >> the correct IP Lease information? I just want to check the basics. >> >> -- >> Cary W. Shultz >> Roanoke, VA 24012 >> >> "Jon Urso" <JonU***@discussions.microsoft.com> wrote in message >> news:B221BD76-698D-4993-877E-6D9389C61449@microsoft.com... >>> Hello, >>> >>> I have configured a GPO to run simple batch-style shutdown and startup >>> scripts on all computers and have linked the GPO to the appropriate OU >>> in my >>> AD domain. I tested the scripts with my own local PC in a test OU first >>> and >>> everything worked perfectly- both scripts executed. >>> >>> Now that I have implemented these scripts in my production environment, >>> however, I notice that when a production server restarts, only one of >>> the 2 >>> scripts is running and neither consistently; some of the servers run >>> the >>> shutdown script and not the startup one, and some will run the startup >>> script >>> and not the shutdown one. >>> >>> Does anybody have suggestions on how I can resolve this issue? >>> >>> Thanks in advance, >>> >>> Jon >> >> > > Thanks guys for the insight!!
I added the "domain computers" group to the security ACLs on both the GPO itself (i.e. groups that the settings from this GPO can be applied to) and the actual folders containing the scripts under the SYSVOL share on my DC. The next time I reboot a server, I will keep an eye on whether both scripts get executed. Jon Show quoteHide quote "Cary Shultz" wrote: > Jeez! > > Thanks for mentioning this, Richard. I am leaving off the 'basics'. I > guess what is clear to me is not clear to everyone. And, like my wife, not > many people can read my mind!!! ;-) > > -- > Cary W. Shultz > Roanoke, VA 24012 > > "Richard Mueller" <rlmueller-NOSPAM@ameritech.NOSPAM.net> wrote in message > news:uEW8AhDJGHA.596@TK2MSFTNGP10.phx.gbl... > > Hi, > > > > Also, Startup and Shutdown scripts run with System permissions on the > > local computer, but the permissions of the computer object in the domain. > > A script that works with your credentials may not work if the computer > > object lacks permission. You may need to grant "Domain Computers" > > permissions. > > > > -- > > Richard > > Microsoft MVP Scripting and ADSI > > Hilltop Lab - http://www.rlmueller.net > > > > "Cary Shultz" <cwshu***@mvps.org> wrote in message > > news:uokgMn8IGHA.2928@TK2MSFTNGP10.phx.gbl... > >> Jon, > >> > >> What t/s steps have you already taken? Have you looked in the event logs > >> on any of the clients? Have you looked at RSOP (Resultant Set of > >> Policies)? Do you have the GPMC installed? This often helps? > >> > >> How is DNS configured in your environment? Are both Domain Controllers > >> (making an assumption here) also DNS Servers? And do the clients have > >> the correct IP Lease information? I just want to check the basics. > >> > >> -- > >> Cary W. Shultz > >> Roanoke, VA 24012 > >> > >> "Jon Urso" <JonU***@discussions.microsoft.com> wrote in message > >> news:B221BD76-698D-4993-877E-6D9389C61449@microsoft.com... > >>> Hello, > >>> > >>> I have configured a GPO to run simple batch-style shutdown and startup > >>> scripts on all computers and have linked the GPO to the appropriate OU > >>> in my > >>> AD domain. I tested the scripts with my own local PC in a test OU first > >>> and > >>> everything worked perfectly- both scripts executed. > >>> > >>> Now that I have implemented these scripts in my production environment, > >>> however, I notice that when a production server restarts, only one of > >>> the 2 > >>> scripts is running and neither consistently; some of the servers run > >>> the > >>> shutdown script and not the startup one, and some will run the startup > >>> script > >>> and not the shutdown one. > >>> > >>> Does anybody have suggestions on how I can resolve this issue? > >>> > >>> Thanks in advance, > >>> > >>> Jon > >> > >> > > > > > > > 
Other interesting topics
LDAP query failing
User logon connection dropped overnight. Slow logon when appying personal settings Is there ~1000 value limit for multi-valued attributes is ADAM? NTDS ISAM and NTDS SDPROP errors Remove Dirty Boxes [WildPacket] Need help with global AD DNS server placement certificate of type DomainController has failed Any way to tell owner of files on file server? Complex Passwords |
|||||||||||||||||||||||
