Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Login script problems

08 Apr 2010   #11
WindowsStar

Windows 7 Enterprise (x64); Windows Server 2008 R2 (x64)
 
 

If you want to PM me with your current logon CMD script I can convert it to VBS.


My System SpecsSystem Spec
.
17 Feb 2011   #12
djkc909

7 32 pro
 
 
Solution

From Install Network printers without Local admin rights in windows 7


There are TWO "Point and Print Restrictions" settings
  • Computer Configuration/Policies/Administrative Templates/Printers/Point and Print Restrictions
  • User Configuration/Policies/Administrative Templates/Control Panel/Printers/Point and Print Restrictions


Of these two, the one under Computer Configuration seems to be the important one. But guess what? The original Server 2008 doesn't include this setting in the list -- you need Server 2008R2 for this setting to show up. If you download the administrative templates from Server 2008 R2, extract, and copy the PolicyDefinitions folder to C:\Windows\sysvol\domain\Policies\PolicyDefinitions, this missing policy will show up magically in Group Policy Management Editor. Of course, the ADMX files from Server 2008 R2 causes Group Policy Management Editor from Server 2008 tocomplain about parse errors, but it works just fine to click "OK".




Once you've installed the proper ADMX files, for this to work in Windows 7, configure bothof these "Point and Print Restrictions" settings to:
  • Enabled
  • Security Prompts, When Installing Drivers for a new connection = Do not show warning or elevation prompt
  • Security Prompts, When Installing Drivers for a new connection = Do not show warning or elevation prompt


Also, don't forget to make sure the users have permission to install printer drivers, since you're not even going to try to use Admin privileges any more:
  • Computer Configuration\Policies\Administrative Templates\System\Driver Installation
  • The setting is called "Allow non-administrators to install drivers for these devices setup classes".
  • You will need to add thedevice class GUID of printers: {4d36e979-e325-11ce-bfc1-08002be10318}

Don't forget to update the computer policy on the workstation by running "gpupdate /force". Then log on as a non-admin user, and test! It worked for me with an annoying Konica Minolta bizhub C550 fax driver that was prompting my Win7 non-admin users for privileges when the logon script tried to install the driver for them. YMMV.




Good luck!
My System SpecsSystem Spec
17 Feb 2011   #13
djkc909

7 32 pro
 
 
Solution concurrence

Login script won't map printers on Windows 7

Scroll all the way to bottom to see solution.. same domain policy mentioned.

I'm about to add the template to a 2003 domain and test printer logon scripts on a 7 machine.

Let'cha know soon!
My System SpecsSystem Spec
.

17 Feb 2011   #14
haxcid

Windows 7; Server 08; Window Home Server; Vista; XP
 
 

Quote   Quote: Originally Posted by djkc909 View Post
Login script won't map printers on Windows 7

Scroll all the way to bottom to see solution.. same domain policy mentioned.

I'm about to add the template to a 2003 domain and test printer logon scripts on a 7 machine.

Let'cha know soon!
Set up a print server and gpo them to the machines. Really very simple to setup and work (in a domain)
My System SpecsSystem Spec
17 Feb 2011   #15
djkc909

7 32 pro
 
 
Solution roadblock - Can't add ADMX templates into 2003 GPO

OK, so there is an issue adding Windows 7/Server 2008 templates (ADMX files) into a 2003 domain GP.

Here is another article with additional solutions:

Add admx policy's into windows server 2003
My System SpecsSystem Spec
17 Feb 2011   #16
djkc909

7 32 pro
 
 
Solution evidence - straight from the Horse's mouth itself

The golden KB article:
The Point and Print User configuration policy is ignored by Windows 7, Windows Server 2008 R2 and Service Pack 2 release of Windows Vista, Windows Server 2008.
EXCERPT:

NOTE: Alternatively you can disable the driver installation warning messages and elevation prompts on computers that are running Windows 7, Windows Server 2008 R2 and Service Pack 2 release of Windows Vista and Windows Server 2008 by completely disabling the Point and Print Restrictions Policy. This setting disables the enhanced printer driver installation security of Windows 7 and Windows Server 2008 R2:

Computer Configuration -> Policies -> Administrative Templates -> Printers : Point and Print Restrictions
Setting: Disable
My System SpecsSystem Spec
08 Mar 2011   #17
djkc909

7 32 pro
 
 

Success!

Windows 7 machines are now mapping printers (and transparently installing their drivers) via user logon scripts in a Server 2003/2000 only domain environment (no 2008) without prompting the user or ignoring the scripts!

So basically, the solution was to copy the PolicyDefinitions folder from a local Windows 7 machine to the SysVol on the domain. Then use RSAT from the Windows 7 machine to connect to and manage the domain's newly "genetically engineered" GP.

Now I just need to figure out how to add 64-bit printer drivers to print shares on 2000 servers. Har har. NOT! (The servers are actually being taken out back with a baseball bat (couldn't find a sledge hammer)).

Btw, nice try HaxciD. It's not as simple a solution as your fail post suggested. But thank you for playing!
My System SpecsSystem Spec
01 Jun 2011   #18
glks

Vista
 
 
a little more detail

Hey there djkc909,
congrats on getting that sorted.
I've seen a number of different solutions to UAC-related issues using W7 in W2K3 domains; here is the technet link with an explanation of what happens with logon scripts as a result of the use of limited / elevated tokens - Deploying Group Policy Using Windows Vista

I've found several resolutions

i. use launchapp.wsf to postpone the execution of a logon script (see the link above) - some users have reported difficulties with this implementation
ii. registry hack - After you turn on User Account Control in Windows Vista, programs may be unable to access some network locations
iii. your solution - which I've seen mentioned elsewhere.

I'm new to RSAT, & although I have read your resolution, I don't have enough experience to 'fill in the gaps'...

If you have the time & inclination, I'd really appreciate a dig out here - what are the steps needed to implement this solution?

Thanks

GLKS
My System SpecsSystem Spec
23 Oct 2013   #19
blamar

Windows 7 64bit
 
 

There is a conflict with Windows VISTA and later OS's for UAC. Basically, the OS gets confused as to what token to use, especially if a user has local administrative rights on the system.

Below is an example on how to force the User token to be used in mapping drives.

USE G: "\\server\path" $user $persistent

Note 1: I have only been able to utilize KiXtart 2010 to do this effectively.

Note 2: You must create or update this registry key as well.
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System
EnableLinkedConnections (RegDWORD) 1

Hope this helps.
My System SpecsSystem Spec
31 Oct 2013   #20
WindowsStar

Windows 7 Enterprise (x64); Windows Server 2008 R2 (x64)
 
 

## P E A S E - N O T E ##

Modifying the registry key:
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System
EnableLinkedConnections

Will lower your security in Windows Vista/Windows 7/Windows 8/8.1.

Use extreme caution! -WS
My System SpecsSystem Spec
Reply

 Login script problems




Thread Tools




Similar help and support threads
Thread Forum
login problems
Hello, Since I just logged in I got into a different desktop. This afternoon I shut down my pc like any other time, so not any different than normal. But when I logged in into my own account, with my own password, I got a total new account, new desktop, everything was gone, as if I was in a new...
General Discussion
Turning on login script i.e. at Starbucks cafe
hi guys, It seems I disabled something but when I connect to any wireless networks that require a browser login, i.e. at a starbucks, hotels, etc I don't get by default their login page when launching any browser (ie, chrome, ff), in most cases I have to type 192.168.0.1, for me is fine but...
Browsers & Mail
run executable (script) @ startup / login (before explorer.exe?)
Hi, everything's going well, fixing an issue a day, but the solution to this continues to elude me... I have a (taskbar) toolbar (like quick launch) that shows the folder contents (as usual, like quick launch) on the toolbar. The target folder resides on a virtual volume, that's always...
General Discussion
IE8 Script errors and other problems
I have been running IE8 with no issues since I got my computer 14 months ago. Now things have gone bad. I am getting "Out of memory at line xx" and "Stop running this script? A script on this webpage is causing your browser to run slowly..." It seems to occur on one specific website and...
Browsers & Mail
Auto Login Script For Wifi Hotspots?
I've been trying to find a way for the follwoing to happen; My mum and dad have a static caravan and have paid for the sites wifi for the year, which works fine. When you open a browser it autoredirects you to a login page which needs your username and password. This is fine for their...
Network & Sharing


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 06:39.
Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App