[Samba] Windows 7 logon script not executed

Daniel Müller mueller at tropenklinik.de
Mon Mar 11 07:51:16 MDT 2013


Believe me you can discuss about it or you can accept it. 
To have 50 per cent of my clients setup on Windows 7 was a lot of try and
error. I had to reeingener
all my policies and scripts. 

Good Luck
Daniel

-----------------------------------------------
EDV Daniel Müller

Leitung EDV
Tropenklinik Paul-Lechler-Krankenhaus
Paul-Lechler-Str. 24
72076 Tübingen

Tel.: 07071/206-463, Fax: 07071/206-499
eMail: mueller at tropenklinik.de
Internet: www.tropenklinik.de
-----------------------------------------------

-----Ursprüngliche Nachricht-----
Von: samba-bounces at lists.samba.org [mailto:samba-bounces at lists.samba.org] Im
Auftrag von List Mik
Gesendet: Montag, 11. März 2013 14:41
An: samba at lists.samba.org
Betreff: Re: [Samba] Windows 7 logon script not executed

i have about 100 users, with prim. group users, which should execute
users.bat i have about 40 users, with prim. group exts, which should execute
exts.bat i have ...

yes, i could query the groupmemberships in one batch file, but i don't want
to reengineer my current logon script structure, as it works for my XP
Clients.

i am asking, how win7 prof., logging in to a samba 3.5.6 PDC, does handle
the netlogon share und groupmembership different, than WinXP

Thanks
Mik


Am 11.03.2013 14:06, schrieb Daniel Müller:
> If all all users have the same users.bat!? Why not set:
> logon script = "users.bat"!?
> The differences per "Group" then could be done within this batch.
>
> -----------------------------------------------
> EDV Daniel Müller
>
> Leitung EDV
> Tropenklinik Paul-Lechler-Krankenhaus
> Paul-Lechler-Str. 24
> 72076 Tübingen
>
> Tel.: 07071/206-463, Fax: 07071/206-499
> eMail: mueller at tropenklinik.de
> Internet: www.tropenklinik.de
> -----------------------------------------------
>
> -----Ursprüngliche Nachricht-----
> Von: samba-bounces at lists.samba.org 
> [mailto:samba-bounces at lists.samba.org] Im Auftrag von List Mik
> Gesendet: Montag, 11. März 2013 13:42
> An: samba at lists.samba.org
> Betreff: Re: [Samba] Windows 7 logon script not executed
>
> Hi,
>
> The Script is a regular Dos/Windows batch file (users.bat) with net 
> use commands, like:
> ...
> net use P: \\MyDomain\MySharename
> ...
>
> Thanks
> Mik
>
> Am 11.03.2013 13:13, schrieb Daniel Müller:
>> The behaviour of windows 7 concerning  logon scripts 
>> (ingroup-feature) is quiet different to xp.
>> Without posting your script there is no chance to help you.
>>
>> -----------------------------------------------
>> EDV Daniel Müller
>>
>> Leitung EDV
>> Tropenklinik Paul-Lechler-Krankenhaus Paul-Lechler-Str. 24
>> 72076 Tübingen
>>
>> Tel.: 07071/206-463, Fax: 07071/206-499
>> eMail: mueller at tropenklinik.de
>> Internet: www.tropenklinik.de
>> -----------------------------------------------
>>
>> -----Ursprüngliche Nachricht-----
>> Von: samba-bounces at lists.samba.org
>> [mailto:samba-bounces at lists.samba.org] Im Auftrag von List Mik
>> Gesendet: Montag, 11. März 2013 12:13
>> An: samba at lists.samba.org
>> Betreff: [Samba] Windows 7 logon script not executed
>>
>> Hello,
>>
>> the configuration below, works like a charm for WinXP Prof. Clients:
>>
>> samba 3.5.6, configured as PDC, netlogon share, logon script is
users.bat.
>> The primary group of the Domainusers is "users".
>>
>> the relevant parts of smb.conf:
>>
>> logon script = "%G.bat"
>> [netlogon]
>>            path = /home/samba/netlogon
>>            public = yes
>>            writeable = no
>>            browseable = yes
>>            valid users = "@Domain Users","@users"
>>
>> Logging in from WinXP Prof. SP3 machines,  the logon script is 
>> executed without problems.
>> Logging in from Win7 Prof. SP1 machines (as same domain user), does 
>> not execute the logon script.
>>
>> Domain logins from Win7 Pcs in general work, roaming profiles as 
>> well, only the logon script is not executed.
>>
>> here comes the log of the logon process (/var/log/samba/log.testpc):
>>
>> [2013/03/11 11:11:41.889891,  1]
smbd/service.c:1070(make_connection_snum)
>>      testpc (::ffff:192.168.100.100) connect to service profiles 
>> initially as user testuser (uid=1011, gid=1001) (pid 17853)
>> [2013/03/11 11:11:41.930769,  1]
smbd/service.c:1070(make_connection_snum)
>>      testpc (::ffff:192.168.100.100) connect to service profiles 
>> initially as user testpc$ (uid=1064, gid=515) (pid 17853)
>> [2013/03/11 11:11:41.932278,  1] smbd/vfs.c:932(check_reduced_name)
>>      check_reduced_name: couldn't get realpath for 
>> testuser.v2/ntuser.ini
>> [2013/03/11 11:11:42.312102,  0]
> smbd/nttrans.c:2204(call_nt_transact_ioctl)
>>      call_nt_transact_ioctl(0x1401c4): Currently not implemented.
>> [2013/03/11 11:11:43.082440,  1]
smbd/service.c:1070(make_connection_snum)
>>      testpc (::ffff:192.168.100.100) connect to service testuser 
>> initially as user testuser (uid=1011, gid=1001) (pid 17853)
>> [2013/03/11 11:11:43.174407,  1]
smbd/service.c:1070(make_connection_snum)
>>      testpc (::ffff:192.168.100.100) connect to service netlogon 
>> initially as user testuser (uid=1011, gid=1001) (pid 17853)
>> [2013/03/11 11:11:56.462383,  1] smbd/service.c:1251(close_cnum)
>>      testpc (::ffff:192.168.100.100) closed connection to service 
>> profiles
>> [2013/03/11 11:11:56.465834,  1] smbd/service.c:1251(close_cnum)
>>      testpc (::ffff:192.168.100.100) closed connection to service 
>> testuser
>> [2013/03/11 11:11:56.466887,  1] smbd/service.c:1251(close_cnum)
>>      testpc (::ffff:192.168.100.100) closed connection to service 
>> netlogon
>> [2013/03/11 11:12:08.458230,  1] smbd/service.c:1251(close_cnum)
>>      testpc (::ffff:192.168.100.100) closed connection to service 
>> profiles
>>
>> Somehow it seems, that the win7 clients, when they do a domain logon, 
>> do not consider the group "users" as primary group of the domain user.
>>
>> Any help appreciated, thanks
>>
>> Mik
>>
>>
>>
>>
>> --
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  https://lists.samba.org/mailman/options/samba
>>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba



More information about the samba mailing list