[Samba] SAMBA4 AD - Logon Scripts

[Craig SHONE]

Hi all



Anyone having problems running logon scripts in 4.2.2?



I've created a few test scripts (.bat, .vbs, etc) and placed them in the
netlogon folder and then assigned some user accounts either the .bat or .vbs
files using RSAT tools.



Yet at login none of my client workstations (Windows XP, 7 or 8) execute
their login scripts, none get mapped drives, etc. Browsing to the netlogon
folder on each machine and running the script manually works fine.



Do I need the netlogon directive in my smb.conf ? Or is this deprecated in
favour of assigning via RSAT tools?



Thanks

Craig.

[Marc Muehlfeld]

Hello Craig,

Post by Craig SHONE
Anyone having problems running logon scripts in 4.2.2?

I can't confirm any problems. :-)

Post by Craig SHONE
I've created a few test scripts (.bat, .vbs, etc) and placed them in the
netlogon folder and then assigned some user accounts either the .bat or .vbs
files using RSAT tools.

Is this a new DC installation or are only the new placed files not
beeing execute during logon?

Post by Craig SHONE
Yet at login none of my client workstations (Windows XP, 7 or 8) execute
their login scripts, none get mapped drives, etc. Browsing to the netlogon
folder on each machine and running the script manually works fine.

Have you filled the logon script name into the AD attribute 'scriptPath'?

http://blogs.technet.com/b/deds/archive/2011/10/28/ausfuehren-des-user-objekt-logon-scripts-schlaegt-mit-windows-2008-dcs-fehl.aspx

Alternatively you can define logon scripts via GPO domain/OU wide. There
are many guides out there, if you use $SEARCHENGINE. :-)

Post by Craig SHONE
Do I need the netlogon directive in my smb.conf ? Or is this deprecated in
favour of assigning via RSAT tools?

In an AD environment, you set the logon script via scriptPath attribute
or GPO. The smb.conf directive you need, if you run Samba as an NT4 PDC.


Regards,
Marc

[Marc Muehlfeld]

Hello Craig,

Freshly provisioned CentOS 6.6 DC, freshly provisioned CentOS
6.6 member/file server. Logon scripts called login.bat, login.cmd
and login.vbs all in the netlogon share, all have the same function
of mapping network drives.
Users can log in fine, can browse the file server, can browse the
netlogon
share and run the login script manually without issue. Unix mappings
all done and dusted. Each user has been given a logon script name
using the RSAT tools.
However, not one of my scripts run automatically if assigned by
RSAT. If I assign them via GPO, they work perfectly.

Via GPO they are executed, but not via scriptPath attribute? What's the
content of scriptPath attribute? The following command should print you
DNs having a scriptPath attribute set including the value:

# ldbsearch -H /usr/local/samba/private/sam.ldb 'scriptPath=*' scriptPath


Additionally, please show me the content of you netlogon share (see
smb.conf for path).



Regards,
Marc

[Marc Muehlfeld]

Hello Craig,

Post by Marc Muehlfeld
# ldbsearch -H /usr/local/samba/private/sam.ldb 'scriptPath=*' scriptPath

scriptPath: \\hnpmb02\netlogon\login.vbs

scriptPath contains the path, starting from the netlogon share. If you
just fill it with "login.vbs", it will work.


Regards,
Marc


PS: Please always reply to the list, so everyone can read you text and
is able to help/comment.