PDC issue

[thinami]

When I restrict certain users from shares I get a command box on windows vista after logging in that shows the attachment. It is going through mapping the drives and hits one restricted and waits for a user and password to allow this user access to the share. Am I doing something wrong or is this something I have to live with on Vista Business?

[cpg]

this means that the logon script is not executing properly in your box.

i wonder if the # chars in the logon.bat should be REM instead.

can you change them # to REM in this file in your HDA?

Code: Select all

/var/hda/domain-settings/netlogon/logon.bat

or simply remove the lines starting with #.

[thinami]

When I restrict certain users from shares I get a command box on windows vista after logging in that shows the attachment. It is going through mapping the drives and hits one restricted and waits for a user and password to allow this user access to the share. Am I doing something wrong or is this something I have to live with on Vista Business?

The issue is not the comment remarks but the restriction of shares from the user. Look at the bottom of the print screen and you see where it is asks for the username for 'hda'.

[bsk]

you enter your username

[thinami]

you enter your username

The user should not have to do this every time they log in.

[bsk]

Oh its asking every time. Hmm.

[cpg]

sorry, that was a clueless answer. i read the original properly now with more oxygen in my brain.

i don't know how sophisticated the logon.bat script can be made.

one possibility is to only mount the shares that are common to everyone. i think this is the intent of the logon.bat.

the other possibility is that you could alter logon.bat to only mount the shares that a user is authorized. i am not sure how the script would go about finding out the username of the currently logging in user ($USER?).

yet another possibility is to read the manual for net use to see if there is an option to quit quietly without asking for credentials. this would fail silently and hopefully not show the error window.

can you try and report back what works!?

[thinami]

sorry, that was a clueless answer. i read the original properly now with more oxygen in my brain.

i don't know how sophisticated the logon.bat script can be made.

one possibility is to only mount the shares that are common to everyone. i think this is the intent of the logon.bat.

the other possibility is that you could alter logon.bat to only mount the shares that a user is authorized. i am not sure how the script would go about finding out the username of the currently logging in user ($USER?).

yet another possibility is to read the manual for net use to see if there is an option to quit quietly without asking for credentials. this would fail silently and hopefully not show the error window.

can you try and report back what works!?

Will do.

[moredruid]

I thought it was %user but it's nicely explained in this Microsoft article

[thinami]

Client email issue and haven't had time to work on this more. Will report back.