Re: Problem with Domain Computer account

Hi B,

Some of your post I could not follow too well.
You say this is happening, rather failing to happen,
when started by login script.

In general there are only three or so things that
can go wrong.
1) does the account (that logged in) have permission
to the remote file (share and ntfs levels)
Note: for login access is as the user, so grants to
Domain Computers group is not needed
2) does the account have permissions to write a new
or modified copy to where it attempts to copy file
3) is networking working so that remote share is
available for the copy

I would not have the shared file/folder/share set as
you have described - with Everyone Full, as that is
asking for problems. Authenticated Users (which
effectively includes Domain Computers although as
said this is not needed) should be enough when set
to Read if all that is happening is a copy.
"Mr.B" <borutpuhar@xxxxxxxxx> wrote in message
news:ulNOC1tIHHA.4376@xxxxxxxxxxxxxxxxxxxxxxx
I use log on script that copy one file from cluster share to local
computer.

These is first time that I stumbled with access deny error. At other
customers a did not hat that kind of error.

Permissions on share is Domain computer , and Authenticated user and
Everyone Full control. Same is on security permissions, and I check on
file that Domain computer has full control included file that it copy

A did not change anything on AD, when I implemented solution. But at these
customer, they have high security environment, and they probably change
something on cluster. I thing that, because domain admin, does not have
permission to manage cluster, so thay probably change something. I can
differently implement script, but, I would like to make it work as
computer log on screen.

Script work, if I run it as administrator, I did not cachet it if it run
as regular users, because it copy files on Windows\system32 directory, and
user does not have permissions to write there.



On computer I set up domain computer to have full control under windows
directory, but no help. Problem is on file share on cluster.




.

Relevant Pages

  • Problem with Domain Computer account
    ... I use log on script that copy one file from cluster share to local computer. ... Same is on security permissions, ... that Domain computer has full control included file that it copy ...
    (microsoft.public.windows.server.security)
  • Re: Group policy login script
    ... deliver a login script to a specific group of users is to have it defined ... >I have a login script set in my Default Domain policy. ... > group and set DENY read and execute permissions on the script on my DC. ... > The scipt still seems to run for certain users. ...
    (microsoft.public.security)
  • Re: WMI Script, access denied?
    ... I've got a little script here that I can use to get some information out ... different about accessing a workgroup computer and a domain computer? ... (strComputer, strNamespace, strUser, strPassword) ... W2k3 can only connect to Win9x and NT if credentials supplied. ...
    (microsoft.public.windows.server.scripting)
  • Re: Common tasks of script developer
    ... domain computer, you want your drives mapped, your printers mapped, ... this became the logon script for desktop support. ... accounts created by script are always correct ...
    (microsoft.public.scripting.vbscript)
  • Re: Change local Administrator account name?
    ... The script below should do the job against a remote domain computer ... as long as user running the script have administrator rights on it. ...
    (microsoft.public.scripting.vbscript)