Page 1 of 1 1
Topic Options
#13255 - 2001-10-16 04:56 PM Difference in calling script
Anonymous
Unregistered


Hi,

I've got a question I'm wondering about for some hours now.

I created a script to do a simple share mapping (without drive letter). This mapping has to be there when the server reboots before the logon.

I used srvany from the resource kit to call the cmd file which start the kix script.

All seems to work fine, no errors generated.
The only issue is that (at least I can't see it) the share is not mapped.

When I do the same manually it maps fine.

Am I missing something, does anyone know how to let a service startup a cmd file which calls a kix script to map a share.

env. TSE4 SP6 / MF18 SP3
Kix363

any thoughts are welcome
Thanks

Rob Beekmans

Top
#13256 - 2001-10-18 02:19 AM Re: Difference in calling script
Anonymous
Unregistered


Pretty easy answer
When you start an app from a service, it runs as local system (unless you provide credentials -but only this user will be able to access the drive). Local system (note the local~) is obviously not a user known to the network, and has no rights to access the network. W2K server has an option to grant services from other computers to access the servers (trust for delegation) but guess what... it requires W2K clients. And even then, if system were able to map a drive, all users who log on (providing you haven't customized system rights) have no rights to access those drives, because the mapping is made from system, and runs in another environment (you would simply see them as "network drive", but not showing the servername /its content)

Why would you even want to let systems map drives???? . Logon scripts are extremely handy for this, and i thought KiXtart was all about this in the first place. Use the netlogon share (or sysvol /ad) for finer results.

SO in your case:

-provide the service with credentials who has rights (->from a remote computer this can be done by the XNET utility)

-use Ftp with -s: option as an alternative
-"Trust" the server when you have a W2K domain (dsa.msc -> computers /dc's -> properties)
-check out the service (program should be in "parameters"-section) if you want it to interact with the desktop, assign a reg value of 11 (-> HKLM\SYSTEM\CCS\Services\ServiceName\ "Type=11"
-when using cmd files, note that the system doesn't know about shell extensions yet. Consider using cmd /c "%path%\FileName.BAT"
-As a last resort, you could the system make perform an automatic logon HKLM...\SOFTWARE\MS\W..NT\WINLOGON\entries:
*DefaultUserName=account with (restricted) access
*DefaultPassword=your_pass
*AutoAdminLogon=1
*DontDisplayLastUsername=0


greetz,

Grrrippp!
MCSE 2k

[ 18 October 2001: Message edited by: Stefaan Degroote ]

[ 18 October 2001: Message edited by: Stefaan Degroote ]

[ 18 October 2001: Message edited by: Stefaan Degroote ]

Top
#13257 - 2001-10-18 10:48 AM Re: Difference in calling script
Anonymous
Unregistered


Thanks for the reply,

I want to map a share because of the application packages that are on there.
The system is the only one needing permission to access this share.

agian thnks for the help

grx
Rob Beekmans

Top
#13258 - 2001-10-19 12:09 AM Re: Difference in calling script
Anonymous
Unregistered


The net use command is your answer my friend. As the system account cannot map authenticate on other servers, use the command to map a drive as a domain account.

Shell %comspec% /c net use D: \\server\share password /USERNAME:domain\username

John Mac

Top
Page 1 of 1 1


Moderator:  Jochen, Allen, Radimus, Glenn Barnas, ShaneEP, Ruud van Velsen, Arend_, Mart 
Hop to:
Shout Box

Who's Online
0 registered and 952 anonymous users online.
Newest Members
ManuvdWielNL, Sir_Barrington, batdk82, StuTheCoder, M_Moore
17887 Registered Users

Generated in 0.049 seconds in which 0.024 seconds were spent on a total of 12 queries. Zlib compression enabled.

Search the board with:
superb Board Search
or try with google:
Google
Web kixtart.org