You are not logged in. [Log In] KiXtart.org website » Forums » KiXtart » Basic Scripting » Domain / Local Login
Register User       Forum List       Calendar       FAQ
Page 1 of 1 1
Topic Options
#150472 - 2005-10-24 05:56 PM Domain / Local Login
Gargoyle Offline
MM club member
*****

Registered: 2004-03-09
Posts: 1597
Loc: Valley of the Sun (Arizona, US...
I am sure that I have seen this somewhere, but my searches are not producing anything.

I need a way to determine during logon if a user is using cached credentials, or authenticating to the domain.

Thanks
_________________________
Today is the tomorrow you worried about yesterday.

Top
#150473 - 2005-10-24 06:20 PM Re: Domain / Local Login
Shawn Administrator Offline
Administrator
*****

Registered: 1999-08-13
Posts: 8611
How about:

Code:

If "\\"+@WKSTA = "%LOGONSERVER%"
 ?"Logging in with cached credentials..."
Endif
Top
#150474 - 2005-10-24 06:31 PM Re: Domain / Local Login
Gargoyle Offline
MM club member
*****

Registered: 2004-03-09
Posts: 1597
Loc: Valley of the Sun (Arizona, US...
That is way to easy Shawn. Must be that my brain has has to much Arizona sun....

Thanks.
_________________________
Today is the tomorrow you worried about yesterday.

Top
#150475 - 2005-10-24 06:43 PM Re: Domain / Local Login
Howard Bullock Offline
KiX Supporter
*****

Registered: 2000-09-15
Posts: 5809
Loc: Harrisburg, PA USA
The easy way for me is that the logon script which is domain based does not run when logging in using cached credentials. Are you saying that your script executes when logging in with cached credentials?
_________________________
Home page: http://www.kixhelp.com/hb/

Top
#150476 - 2005-10-24 06:53 PM Re: Domain / Local Login
Shawn Administrator Offline
Administrator
*****

Registered: 1999-08-13
Posts: 8611
lol, didn't even think about that Howard, your right.
Top
#150477 - 2005-10-24 07:09 PM Re: Domain / Local Login
NTDOC Administrator Offline
Administrator
*****

Registered: 2000-07-28
Posts: 11634
Loc: Space
Quote:

Are you saying that your script executes when logging in with cached credentials?



It's a new MAGIC Trick

You'll have to forgive our venerable Shawn as he is a programmer type, not a Network type
Top
#150478 - 2005-10-24 07:47 PM Re: Domain / Local Login
Shawn Administrator Offline
Administrator
*****

Registered: 1999-08-13
Posts: 8611
lol, bastas ! ;0) *kiss*
Top
#150479 - 2005-10-25 12:41 AM Re: Domain / Local Login
Gargoyle Offline
MM club member
*****

Registered: 2004-03-09
Posts: 1597
Loc: Valley of the Sun (Arizona, US...
Quote:

The easy way for me is that the logon script which is domain based does not run when logging in using cached credentials. Are you saying that your script executes when logging in with cached credentials?



I would doubt it, but our desktop guys think it does. I geuss that it could be cached on the local machines, but I have not looked at how the GPO is set up. My boss say's I need you to do this, and I say sure, Kix will do that.
_________________________
Today is the tomorrow you worried about yesterday.

Top
#150480 - 2005-10-25 02:21 AM Re: Domain / Local Login
NTDOC Administrator Offline
Administrator
*****

Registered: 2000-07-28
Posts: 11634
Loc: Space
The only thing CACHED is the users credentials if a Domain Controller can not be found. By default it allows this type of logon 10 times. It does not and can not cache the logon script it'self through this mechanism.
Top
#150481 - 2005-10-25 02:32 AM Re: Domain / Local Login
Gargoyle Offline
MM club member
*****

Registered: 2004-03-09
Posts: 1597
Loc: Valley of the Sun (Arizona, US...
But Doc, you missed the most important part of my post.
Quote:

and I say sure, Kix will do that
_________________________
Today is the tomorrow you worried about yesterday.

Top
#150482 - 2005-10-25 02:32 AM Re: Domain / Local Login
Shawn Administrator Offline
Administrator
*****

Registered: 1999-08-13
Posts: 8611
What if the login script was in the user programs->startup folder ? eh ? what then ?
Top
#150483 - 2005-10-25 02:42 AM Re: Domain / Local Login
NTDOC Administrator Offline
Administrator
*****

Registered: 2000-07-28
Posts: 11634
Loc: Space
Then it still has nothing to do with a Domain Logon, and nothing to do with Cached Logon which is for the credentials.

I'm sure one knows if his/her logon scripts are being run locally or from a Domain.

In most cases even if you had the executable and the scripts both on the local work station they are typically called from the logon process of the Domain, not locally so it still would not run, unless you setup to run in the registry or the startup group. But then anything you tried to do like writing logs or stuff back to the Domain would fail. You could then add code to write local logs, but you still wouldn't know as an Admin when the user was local or on the Domain.

The whole process of trying to do logon scripts locally sort of defeats the purpose of easy workstation management.
 
Top
#150484 - 2005-10-25 03:15 AM Re: Domain / Local Login
Shawn Administrator Offline
Administrator
*****

Registered: 1999-08-13
Posts: 8611
ok bear with me, work with me here. user has a kix script (with above code) setup in run key. user logs in with cached credentials, script starts - code indeed does work as advertised. I rest my case.
Top
#150485 - 2005-10-25 03:25 AM Re: Domain / Local Login
NTDOC Administrator Offline
Administrator
*****

Registered: 2000-07-28
Posts: 11634
Loc: Space
Yeah, sure it does. But any indications of current code working or not working are not coded into the current script (otherwise this post would not exist).

Yeah, you can do all kinds of peculiar coding if one has to because of restraints beyond your control, but this is way beyond normal good practices.

I mean without attempting something like a page or smtp e-mail alert back to an Admin you won't know when the users system ran using cached credentials, ie... The Domain can not be found for some reason. However, often the reason for no Domain would often also prevent anything less than a dedicated modem from sending out an alert as well.

But that is really stretching it... so without going willy-nilly overboard - NO - you can't determine when this happens. Is it possible to setup methods to allow it, yes, but is it cost effective - NO!
Top
#150486 - 2005-10-25 03:27 AM Re: Domain / Local Login
Howard Bullock Offline
KiX Supporter
*****

Registered: 2000-09-15
Posts: 5809
Loc: Harrisburg, PA USA
Yes Shawn it does. I agree 101%.

I take exception to the term "Logon Script" when it is executed from the startup folder and not as part of the logon process. If this was the case it woulf be a script of some other type other than "logon".
_________________________
Home page: http://www.kixhelp.com/hb/

Top
#150487 - 2005-10-25 04:09 AM Re: Domain / Local Login
Shawn Administrator Offline
Administrator
*****

Registered: 1999-08-13
Posts: 8611
Thank you Howard. At least *somebody* around here agrees with the old man.
Top
#150488 - 2005-10-25 04:24 AM Re: Domain / Local Login
NTDOC Administrator Offline
Administrator
*****

Registered: 2000-07-28
Posts: 11634
Loc: Space
I agree you're off your rocker.
Top
#150489 - 2005-11-08 04:37 PM Re: Domain / Local Login
cyri Offline
Getting the hang of it

Registered: 2005-06-27
Posts: 95
I work with Gargoyle (one of the desktop guys that think it's caching the scripts locally). It's not actually caching the scripts locally, but it's caching (in the profile) that I need to run the scripts. I have verified this on my laptop when I logged in using cached credentials at home. Currently we're doing a deployment via a computer startup script so the max time to run scripts is set to 45min.

That means when I log in using cached credentials, it takes almost 45min to logoff the laptop. Because it is caching the fact that it needs to run the logon/logoff scripts in the profile. But not actually caching the scripts themselves. Then, because your offline it can't find the scripts. So you have to wait for it to timeout. Which like I said above, is set to 45min.

Not very cool.
Top
#150490 - 2005-11-08 04:44 PM Re: Domain / Local Login
cyri Offline
Getting the hang of it

Registered: 2005-06-27
Posts: 95
Just so you don't think I'm nuts, here is the registry location where it caches the fact that it needs to run the script (not the scripts themselves).

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System\Scripts\Logon\0\0]
"Script"="Kix32.exe"
"Parameters"="Logon.kix"

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System\Scripts\Logoff\0\0]
"Script"="Kix32.exe"
"Parameters"="Logoff.kix"
Top
Page 1 of 1 1


Moderator:  Jochen, Allen, Radimus, Glenn Barnas, ShaneEP, Ruud van Velsen, Arend_, Mart 
Hop to:
Shout Box

Who's Online
1 registered (mole) and 1300 anonymous users online.
details
Newest Members
Viginette, ManuvdWielNL, Sir_Barrington, batdk82, StuTheCoder
17888 Registered Users
My Cookies · Mark all read Powered by UBB.threads™ Contact Us · KiXtart.org website · Top

Generated in 0.072 seconds in which 0.027 seconds were spent on a total of 12 queries. Zlib compression enabled.
Search the board with:
superb Board Search
or try with google:
Google
Web kixtart.org