Login script doesn't run when user logs into computer in other dom

Discussion in 'Active Directory' started by PanTzeR, Apr 4, 2008.

  1. PanTzeR

    PanTzeR Guest

    Hi,

    We have 2 domains in 2 different forests with trust enabled. It has been set
    up long time ago like it is, but I just done some testing and found that when
    I login under a user setup in 1 domain to the computer belonging to the 2
    domain, login script does not run.

    It runs fine if I am using a user and a computer of the same domain. When it
    does not run, I can navigate to the DC and run it manually without issues.

    In event log on the computer I can see following warning and believe it
    might be related to the problem.

    I would like to be able to run login scripts in described situations, so if
    anyone can please point me to where the problem lies it would be appreciated.

    ---------------------------------------------------------------
    Event Type: Warning
    Event Source: Userenv
    Event Category: None
    Event ID: 1109
    Date: 4/04/2008
    Time: 4:07:18 PM
    User: NT AUTHORITY\SYSTEM
    Computer: COMPUTER160
    Description:
    CN=test123,OU=Technical Support,OU=CITY,DC=first,DC=domain,DC=com from a
    different forest logged onto this machine. Cross Forest Group Policy
    processing is disabled and loopback processing has been enforced in this
    forest for this user account.

    For more information, see Help and Support Center at
    http://go.microsoft.com/fwlink/events.asp.

    Cheers,
    PanTzeR
     
    PanTzeR, Apr 4, 2008
    #1
    1. Advertisements

  2. PanTzeR

    PanTzeR Guest

    Just forgot to mention that login script is set up in the user account
    properties. User account is set up in Windows 2000 native domain, computer
    account is in Windows 2003 domain. Trust between domains is external.
    Computer I was testing it all on is running Windows XP. DC where script is -
    is the only DC for the site and is logonserver for the client.
     
    PanTzeR, Apr 4, 2008
    #2
    1. Advertisements

  3. Ziad K. Chafi, Apr 4, 2008
    #3
  4. PanTzeR

    PanTzeR Guest

    Thank you for your reply. I read document on the link you provided few times
    and cannot see how that can solve the problem I am having.

    As for the Group Policy related group, I might try it next time, but
    question is in relation to the login script which is set in Active Directory
    account properties and not through GPO.
     
    PanTzeR, Apr 8, 2008
    #4
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.