[Samba] Windows 7 Logon Scripts To Not Run [Was: Four DCs, No Replication]

[Ryan Ashley]

Alright, I have never attempted to run a script via an LDAP attribute. I 
normally create a global security group and apply a GPO to that group 
only, and set scripts and such for that group in the GPO.

If this is a setup of Windows workstations, may I ask what the script 
does that GPO cannot do? I used to use loads of scripts for drive-maps 
and such until 2008 came out. Now I can do registry, drive-maps, 
printers, everything from group policy preferences. It even works on an 
XP machine.

On 08/13/2014 01:25 PM, Adam Tauno Williams wrote:
> On Wed, 2014-08-13 at 12:21 -0400, Ryan Ashley wrote:
>> If the user can run the script by hand, he has access. This tells me
>> something else is at play. Is it specified as a startup or logon script
>> in a GPO?
> No it is applied via the loginScript attribute of the user's object.
>
>> Do you have a GPO that tells the computer to wait for the network at
>> startup?
> It worked until the new DCs were added to the domian.
>
>> If this is a laptop on wireless, you may be in a bind since
>> wireless won't connect until logged into the system. A problem I have
>> with a few clients who use laptops.
> This relates to 200+ cabled workstations.
>