Windows Vista Forums
Vista Forums Home Join Vista Forums Donate Vista Tutorials Tags

Welcome to Vista Forums we are your forum to discuss Windows Vista x64 and x86 systems. Whether you need help or just want to post an idea you have on Vista, this is the forum for you.
Register at Vista forums...the world biggest Windows Vista resource Join Vista Forums Now

Go Back   Vista Forums > Vista Newsgroups > Vista security

Best Practices, Vista Logon Scripts

Closed Thread
 
Thread Tools Display Modes
Old 10-12-2006   #1 (permalink)
Doug Walch
Guest


 

Best Practices, Vista Logon Scripts

I'm interested to know if there is a Best Practices White Paper with respect
to Vista Logon Scripts from Active Directory, addressing issues with UAC,
mapping drives, registry keys etc. If not, there should be! TIA


Old 01-05-2007   #2 (permalink)
Ridesy
Guest


 

RE: Best Practices, Vista Logon Scripts

Doug,

Did you get anywhere with this question, as I have a similar issue of UAC
asking for approval of a simple Server 2003 logon script for every user,
everytime they logon to the network and I can't see anyway to "add the logon
script as something that doesn't need approval"??

Jeremy

"Doug Walch" wrote:

> I'm interested to know if there is a Best Practices White Paper with respect
> to Vista Logon Scripts from Active Directory, addressing issues with UAC,
> mapping drives, registry keys etc. If not, there should be! TIA
>
>
>

Old 01-08-2007   #3 (permalink)
Gerry Hickman
Guest


 

Re: Best Practices, Vista Logon Scripts

Hi Ridesy,

>> I'm interested to know if there is a Best Practices White Paper with respect
>> to Vista Logon Scripts from Active Directory, addressing issues with UAC,
>> mapping drives, registry keys etc. If not, there should be! TIA


What possible issues could there be?

If your logon script triggers UAC, it's probably a flawed logon script...

Logon scripts are for USERs only, they are not for anything that
requires administrative action.

--
Gerry Hickman (London UK)
Old 01-09-2007   #4 (permalink)
Ridesy
Guest


 

Re: Best Practices, Vista Logon Scripts

Gerry,

Thanks for your two replies, but I still have the same issues:

1. The logon script just runs SBS Server 2003 "client\setup\setup.exe" and
nothing else.
2. If I have an account on a PC set-up as "Standard User" the problem is
even worse with UAC, as the same pop-up arrives, but without an admin
account/password the user can only cancel the setup.exe from running.

I am currently trying to find out what the heck the setup.exe set's up, but
I am a bit stunned that this must be a standard part of certainly SBS Server
2003 configuration and it appears it is going to be an issue with any PC
running Vista attaching to the domain.

Ridesy

"Gerry Hickman" wrote:

> Hi Ridesy,
>
> >> I'm interested to know if there is a Best Practices White Paper with respect
> >> to Vista Logon Scripts from Active Directory, addressing issues with UAC,
> >> mapping drives, registry keys etc. If not, there should be! TIA

>
> What possible issues could there be?
>
> If your logon script triggers UAC, it's probably a flawed logon script...
>
> Logon scripts are for USERs only, they are not for anything that
> requires administrative action.
>
> --
> Gerry Hickman (London UK)
>

Old 01-09-2007   #5 (permalink)
Kerry Brown
Guest


 

Re: Best Practices, Vista Logon Scripts

Microsoft should have an update for SBS out soon. The setup.exe in the SBS
logon script is where SBS checks for and installs any programs, service
packs etc. that you have setup to automatically deploy to users. Typically
SP2, Outlook and IE are setup by default. The workaround is to disable the
logon script for Vista users and manage this manually until Microsoft has
the update for SBS ready.

--
Kerry Brown
Microsoft MVP - Shell/User
http://www.vistahelp.ca


"Ridesy" <Ridesy@discussions.microsoft.com> wrote in message
news:2AE48C7E-028C-4351-8BB5-9840BFB98B4B@microsoft.com...
> Gerry,
>
> Thanks for your two replies, but I still have the same issues:
>
> 1. The logon script just runs SBS Server 2003 "client\setup\setup.exe" and
> nothing else.
> 2. If I have an account on a PC set-up as "Standard User" the problem is
> even worse with UAC, as the same pop-up arrives, but without an admin
> account/password the user can only cancel the setup.exe from running.
>
> I am currently trying to find out what the heck the setup.exe set's up,
> but
> I am a bit stunned that this must be a standard part of certainly SBS
> Server
> 2003 configuration and it appears it is going to be an issue with any PC
> running Vista attaching to the domain.
>
> Ridesy
>
> "Gerry Hickman" wrote:
>
>> Hi Ridesy,
>>
>> >> I'm interested to know if there is a Best Practices White Paper with
>> >> respect
>> >> to Vista Logon Scripts from Active Directory, addressing issues with
>> >> UAC,
>> >> mapping drives, registry keys etc. If not, there should be! TIA

>>
>> What possible issues could there be?
>>
>> If your logon script triggers UAC, it's probably a flawed logon script...
>>
>> Logon scripts are for USERs only, they are not for anything that
>> requires administrative action.
>>
>> --
>> Gerry Hickman (London UK)
>>


Old 01-09-2007   #6 (permalink)
Ridesy
Guest


 

Re: Best Practices, Vista Logon Scripts

Kerry,

Thank you for this information, look forward to SBS update!

In the meantime will disable for Vista test PC's, any hints on how to do this?

Ridesy

"Kerry Brown" wrote:

> Microsoft should have an update for SBS out soon. The setup.exe in the SBS
> logon script is where SBS checks for and installs any programs, service
> packs etc. that you have setup to automatically deploy to users. Typically
> SP2, Outlook and IE are setup by default. The workaround is to disable the
> logon script for Vista users and manage this manually until Microsoft has
> the update for SBS ready.
>
> --
> Kerry Brown
> Microsoft MVP - Shell/User
> http://www.vistahelp.ca
>
>
> "Ridesy" <Ridesy@discussions.microsoft.com> wrote in message
> news:2AE48C7E-028C-4351-8BB5-9840BFB98B4B@microsoft.com...
> > Gerry,
> >
> > Thanks for your two replies, but I still have the same issues:
> >
> > 1. The logon script just runs SBS Server 2003 "client\setup\setup.exe" and
> > nothing else.
> > 2. If I have an account on a PC set-up as "Standard User" the problem is
> > even worse with UAC, as the same pop-up arrives, but without an admin
> > account/password the user can only cancel the setup.exe from running.
> >
> > I am currently trying to find out what the heck the setup.exe set's up,
> > but
> > I am a bit stunned that this must be a standard part of certainly SBS
> > Server
> > 2003 configuration and it appears it is going to be an issue with any PC
> > running Vista attaching to the domain.
> >
> > Ridesy
> >
> > "Gerry Hickman" wrote:
> >
> >> Hi Ridesy,
> >>
> >> >> I'm interested to know if there is a Best Practices White Paper with
> >> >> respect
> >> >> to Vista Logon Scripts from Active Directory, addressing issues with
> >> >> UAC,
> >> >> mapping drives, registry keys etc. If not, there should be! TIA
> >>
> >> What possible issues could there be?
> >>
> >> If your logon script triggers UAC, it's probably a flawed logon script...
> >>
> >> Logon scripts are for USERs only, they are not for anything that
> >> requires administrative action.
> >>
> >> --
> >> Gerry Hickman (London UK)
> >>

>
>

Old 01-09-2007   #7 (permalink)
Kerry Brown
Guest


 

Re: Best Practices, Vista Logon Scripts

From the user screen in the SBS Server Management console double click the
user. Click on the Profile tab and remove or change the entry for the logon
script.

--
Kerry Brown
Microsoft MVP - Shell/User
http://www.vistahelp.ca


"Ridesy" <Ridesy@discussions.microsoft.com> wrote in message
news:CBAEED1A-5A2B-4091-84BD-B16416062CF2@microsoft.com...
> Kerry,
>
> Thank you for this information, look forward to SBS update!
>
> In the meantime will disable for Vista test PC's, any hints on how to do
> this?
>
> Ridesy
>
> "Kerry Brown" wrote:
>
>> Microsoft should have an update for SBS out soon. The setup.exe in the
>> SBS
>> logon script is where SBS checks for and installs any programs, service
>> packs etc. that you have setup to automatically deploy to users.
>> Typically
>> SP2, Outlook and IE are setup by default. The workaround is to disable
>> the
>> logon script for Vista users and manage this manually until Microsoft has
>> the update for SBS ready.
>>
>> --
>> Kerry Brown
>> Microsoft MVP - Shell/User
>> http://www.vistahelp.ca
>>
>>
>> "Ridesy" <Ridesy@discussions.microsoft.com> wrote in message
>> news:2AE48C7E-028C-4351-8BB5-9840BFB98B4B@microsoft.com...
>> > Gerry,
>> >
>> > Thanks for your two replies, but I still have the same issues:
>> >
>> > 1. The logon script just runs SBS Server 2003 "client\setup\setup.exe"
>> > and
>> > nothing else.
>> > 2. If I have an account on a PC set-up as "Standard User" the problem
>> > is
>> > even worse with UAC, as the same pop-up arrives, but without an admin
>> > account/password the user can only cancel the setup.exe from running.
>> >
>> > I am currently trying to find out what the heck the setup.exe set's up,
>> > but
>> > I am a bit stunned that this must be a standard part of certainly SBS
>> > Server
>> > 2003 configuration and it appears it is going to be an issue with any
>> > PC
>> > running Vista attaching to the domain.
>> >
>> > Ridesy
>> >
>> > "Gerry Hickman" wrote:
>> >
>> >> Hi Ridesy,
>> >>
>> >> >> I'm interested to know if there is a Best Practices White Paper
>> >> >> with
>> >> >> respect
>> >> >> to Vista Logon Scripts from Active Directory, addressing issues
>> >> >> with
>> >> >> UAC,
>> >> >> mapping drives, registry keys etc. If not, there should be! TIA
>> >>
>> >> What possible issues could there be?
>> >>
>> >> If your logon script triggers UAC, it's probably a flawed logon
>> >> script...
>> >>
>> >> Logon scripts are for USERs only, they are not for anything that
>> >> requires administrative action.
>> >>
>> >> --
>> >> Gerry Hickman (London UK)
>> >>

>>
>>


Closed Thread

Thread Tools
Display Modes


Similar Threads
Thread Thread Starter Forum Replies Last Post
Issues With GPO Logon Scripts circulent Vista networking & sharing 0 11-29-2007 04:28 PM
Using Kixtart logon scripts aaron Vista networking & sharing 0 09-25-2007 02:24 PM
Powershell and Logon Scripts klumsy@xtra.co.nz PowerShell 2 06-29-2007 09:05 AM
powershell logon scripts Andrew Zirkel PowerShell 10 06-26-2007 06:10 PM
Run elaveted logon scripts Or Tsemah Vista security 0 11-08-2006 01:32 PM








Vistax64.com is an independent web site and has not been authorized,
sponsored, or otherwise approved by Microsoft Corporation.
"Windows Vista", the Start Orb, and related materials are trademarks of Microsoft Corp.
© Designer Media 2005-2008

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50