Weird problem with policies/login script after migration (SBS2K3 -> Win2008)

[tvengel]

#143641

Hello,

I’m encoutering a weird problem after a migration, which was completed 2 weeks ago.
The migration was from Windows SBS 2003 (singel server) to Windows 2008 SP2 (Fileserver) and Windows 2008 SP2 + Exchange 2007)
Since 2 days, the PC’s aren’t executing their login scripts anymore.
Evenmore, when I put the login script as shortcut in the startup folder (all users on client PC) the drivemappings
aren’t created also.
Currently the following policies still exist (in the same order):
– Small Business Server Windows Firewall
– Small Business Server Internet Connection Firewall
– Small Business Server Client Computer
– Small Business Server Remote Assistance Policy
– Small Buniness Server Lockout Policy
– Small Business Server Domain Password Policy
– Default Domain Policy

When I start the login script manually through the \servernamesysvolscriptslogin.bat, all drive mapping are created succesfully.
I’ve discovered this as the Terminal Server wasn’t creating the drivemapping anymore and noticed that some PC’s also have this problem.

When I execute a gpresult from the Terminal Server, I have the following information :
U:timve>gpresult

Microsoft (R) Windows (R) Operating System Group Policy Result tool v2.0
Copyright (C) Microsoft Corp. 1981-2001

Created On 7/8/2009 at 14:25:04

RSOP data for DOMAINTIMVE on GPTERM01 : Logging Mode

---

OS Type: Microsoft(R) Windows(R) Server 2003, Standard Editi
on
OS Configuration: Member Server
OS Version: 5.2.3790
Terminal Server Mode: Application Server
Site Name: N/A
Roaming Profile:
Local Profile: C:Documents and Settingstimve
Connected over a slow link?: No

USER SETTINGS

---

CN=Tim Van Engeland,OU=Users,OU=Directie,OU=domain,DC=domain
,DC=local
Last time Group Policy was applied: 7/8/2009 at 13:13:16
Group Policy was applied from: GPFPS01.domain.local
Group Policy slow link threshold: 500 kbps
Domain Name: GREENPARTNERS
Domain Type: Windows 2000

Applied Group Policy Objects

---

Default Domain Policy

The following GPOs were not applied because they were filtered out

---

Small Business Server Client Computer
Filtering: Not Applied (Empty)

Small Business Server Remote Assistance Policy
Filtering: Disabled (GPO)

AdvAgentUnInstall
Filtering: Disabled (GPO)

Small Business Server Internet Connection Firewall
Filtering: Denied (WMI Filter)
WMI Filter: PreSP2

Small Business Server Lockout Policy
Filtering: Disabled (GPO)

Small Business Server Windows Firewall
Filtering: Denied (WMI Filter)
WMI Filter: PostSP2

Local Group Policy
Filtering: Not Applied (Empty)

Small Business Server Domain Password Policy
Filtering: Not Applied (Empty)

The user is a part of the following security groups

---

Domain Users
Everyone
Remote Desktop Users
BUILTINUsers
REMOTE INTERACTIVE LOGON
NT AUTHORITYINTERACTIVE
NT AUTHORITYAuthenticated Users
This Organization
LOCAL
SG-GP-DIRECTIE
SG-GREENPARTNERS

Because the problem is escalating right now, I’ve did the following :
– Unchecked the extra policies “Link Enabled”.
– gupdate on client pc
– reboot

Still the same problem.
As it was solved this morning by just using a “net use * /DELETE /YES” and run the login script manually,it doesn’t work anymore.
Some of the PC where it doesn’t work, show “Disconnected Netwerk Drive (H:). Right clicking them and choose disconnect gives an error “This network connection does not exist”.

Someone has some advice for me?

Regard,
Tim Van Engeland

[Author]

Posts