Sign in with
Sign up | Sign in
Your question
Closed

GPO not being applied to Citrix login

Tags:
  • Login
  • Citrix
  • Windows
Last response: in Windows 2000/NT
Share
February 1, 2005 3:35:04 PM

Archived from groups: microsoft.public.win2000.active_directory (More info?)

Hi there, hoping someone can shed some light on this. We are running a
VBScript login script thru group policy. Works fine as long as users are not
using Citrix. thought it was an issue with MetaFrame XP. Finally was able
(today) to run RSoP on a specific user and machine, and the GPO does not show
as being applied. There are 2 others (the default domain, and another one
that only has a computer configuration setting configured to run a little
batch file at startup) that DO show as being applied. The login script has
the computer configs setting disabled and just uses the user/windows settings
to run the script. Any clues as to what I can check next?

I am going bald trying to figure this out.....

Thanks,

Suzanne
--
no matter where you go, there you are.

More about : gpo applied citrix login

Anonymous
February 2, 2005 1:47:34 AM

Archived from groups: microsoft.public.win2000.active_directory (More info?)

Suzanne,

Not to second guess anything here... but the behavior you've described does
sound like the users aren't in the OU to which the GPO has been applied.
You need to make sure that this is not simply applied to a sub-OU or that
GPO filtering is not preventing the User Policy from being applied to the
Users.

You've also mentioned some scripting behavior that looks to the username and
machine name for its application. Depending on the version of Citrix
(especially presentation server 3.0 with its new handling of anonymous
connection types) and when the script fires off (Before or after the HKCU
hive is instantiated) there can be different values for user values than you
might expect.

Can you give us more info about the versions of windows and Citrix you are
running and maybe post your script? Do other User GPOs other than the
script apply?
--
Ryan Hanisco
MCSE, MCDBA
Flagship Integration Services

"Suzanne" <Suzanne@discussions.microsoft.com> wrote in message
news:A04FC4E3-8C7D-4680-9685-1E09F1C3AD64@microsoft.com...
> Hi there, hoping someone can shed some light on this. We are running a
> VBScript login script thru group policy. Works fine as long as users are
> not
> using Citrix. thought it was an issue with MetaFrame XP. Finally was
> able
> (today) to run RSoP on a specific user and machine, and the GPO does not
> show
> as being applied. There are 2 others (the default domain, and another one
> that only has a computer configuration setting configured to run a little
> batch file at startup) that DO show as being applied. The login script
> has
> the computer configs setting disabled and just uses the user/windows
> settings
> to run the script. Any clues as to what I can check next?
>
> I am going bald trying to figure this out.....
>
> Thanks,
>
> Suzanne
> --
> no matter where you go, there you are.
Anonymous
February 2, 2005 12:07:09 PM

Archived from groups: microsoft.public.win2000.active_directory (More info?)

Hi Suzanne

I gather the login script is applied to an OU to which the users are
members?

Is there any chance that a GPO applied to the Citrix server has policy
loopback in replace mode turned on? If so, the GPO's that would normally
apply to the users will be ignored an instead, the user configuration
portion of GPO's applying to the server will be used instead.

HTH
--
Mark Renoden [MSFT]
Windows Platform Support Team
Email: markreno@online.microsoft.com

Please note you'll need to strip ".online" from my email address to email
me; I'll post a response back to the group.

This posting is provided "AS IS" with no warranties, and confers no rights.

"Suzanne" <Suzanne@discussions.microsoft.com> wrote in message
news:A04FC4E3-8C7D-4680-9685-1E09F1C3AD64@microsoft.com...
> Hi there, hoping someone can shed some light on this. We are running a
> VBScript login script thru group policy. Works fine as long as users are
> not
> using Citrix. thought it was an issue with MetaFrame XP. Finally was
> able
> (today) to run RSoP on a specific user and machine, and the GPO does not
> show
> as being applied. There are 2 others (the default domain, and another one
> that only has a computer configuration setting configured to run a little
> batch file at startup) that DO show as being applied. The login script
> has
> the computer configs setting disabled and just uses the user/windows
> settings
> to run the script. Any clues as to what I can check next?
>
> I am going bald trying to figure this out.....
>
> Thanks,
>
> Suzanne
> --
> no matter where you go, there you are.
Related resources
Can't find your answer ? Ask !
February 2, 2005 12:07:10 PM

Archived from groups: microsoft.public.win2000.active_directory (More info?)

Mark,

Yes the user is a member of an OU to which the GPO is applied. My
understanding of loopback is that you must be in AD native mode to enable
this feature. But I checked anyway, and my version of admin templates don't
have that option. But something seems to be blocking it only on the citrix
server only. (When I run the user name and machine thru the script, it maps
perfectly (and it uses the machine name to validate the running of certain
functions) for the user).

Thanks for the help!

"Mark Renoden [MSFT]" wrote:

> Hi Suzanne
>
> I gather the login script is applied to an OU to which the users are
> members?
>
> Is there any chance that a GPO applied to the Citrix server has policy
> loopback in replace mode turned on? If so, the GPO's that would normally
> apply to the users will be ignored an instead, the user configuration
> portion of GPO's applying to the server will be used instead.
>
> HTH
> --
> Mark Renoden [MSFT]
> Windows Platform Support Team
> Email: markreno@online.microsoft.com
>
> Please note you'll need to strip ".online" from my email address to email
> me; I'll post a response back to the group.
>
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
> "Suzanne" <Suzanne@discussions.microsoft.com> wrote in message
> news:A04FC4E3-8C7D-4680-9685-1E09F1C3AD64@microsoft.com...
> > Hi there, hoping someone can shed some light on this. We are running a
> > VBScript login script thru group policy. Works fine as long as users are
> > not
> > using Citrix. thought it was an issue with MetaFrame XP. Finally was
> > able
> > (today) to run RSoP on a specific user and machine, and the GPO does not
> > show
> > as being applied. There are 2 others (the default domain, and another one
> > that only has a computer configuration setting configured to run a little
> > batch file at startup) that DO show as being applied. The login script
> > has
> > the computer configs setting disabled and just uses the user/windows
> > settings
> > to run the script. Any clues as to what I can check next?
> >
> > I am going bald trying to figure this out.....
> >
> > Thanks,
> >
> > Suzanne
> > --
> > no matter where you go, there you are.
>
>
>
Anonymous
February 2, 2005 1:07:54 PM

Archived from groups: microsoft.public.win2000.active_directory (More info?)

Hi Suzanne

I guess my next suggestion would be to enable user environment debug logging
and look for answers there. You'll want to do this at a time when only one
user is logging onto the Citrix server to minimize the data you're looking
at:

221833 How to enable user environment debug logging in retail builds of
Windows
http://support.microsoft.com/?id=221833

HTH
--
Mark Renoden [MSFT]
Windows Platform Support Team
Email: markreno@online.microsoft.com

Please note you'll need to strip ".online" from my email address to email
me; I'll post a response back to the group.

This posting is provided "AS IS" with no warranties, and confers no rights.

"Suzanne" <Suzanne@discussions.microsoft.com> wrote in message
news:2ED449D7-3A18-4FB4-8F22-B749945C8C41@microsoft.com...
> Mark,
>
> Yes the user is a member of an OU to which the GPO is applied. My
> understanding of loopback is that you must be in AD native mode to enable
> this feature. But I checked anyway, and my version of admin templates
> don't
> have that option. But something seems to be blocking it only on the
> citrix
> server only. (When I run the user name and machine thru the script, it
> maps
> perfectly (and it uses the machine name to validate the running of certain
> functions) for the user).
>
> Thanks for the help!
>
> "Mark Renoden [MSFT]" wrote:
>
>> Hi Suzanne
>>
>> I gather the login script is applied to an OU to which the users are
>> members?
>>
>> Is there any chance that a GPO applied to the Citrix server has policy
>> loopback in replace mode turned on? If so, the GPO's that would normally
>> apply to the users will be ignored an instead, the user configuration
>> portion of GPO's applying to the server will be used instead.
>>
>> HTH
>> --
>> Mark Renoden [MSFT]
>> Windows Platform Support Team
>> Email: markreno@online.microsoft.com
>>
>> Please note you'll need to strip ".online" from my email address to email
>> me; I'll post a response back to the group.
>>
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>>
>> "Suzanne" <Suzanne@discussions.microsoft.com> wrote in message
>> news:A04FC4E3-8C7D-4680-9685-1E09F1C3AD64@microsoft.com...
>> > Hi there, hoping someone can shed some light on this. We are running a
>> > VBScript login script thru group policy. Works fine as long as users
>> > are
>> > not
>> > using Citrix. thought it was an issue with MetaFrame XP. Finally was
>> > able
>> > (today) to run RSoP on a specific user and machine, and the GPO does
>> > not
>> > show
>> > as being applied. There are 2 others (the default domain, and another
>> > one
>> > that only has a computer configuration setting configured to run a
>> > little
>> > batch file at startup) that DO show as being applied. The login script
>> > has
>> > the computer configs setting disabled and just uses the user/windows
>> > settings
>> > to run the script. Any clues as to what I can check next?
>> >
>> > I am going bald trying to figure this out.....
>> >
>> > Thanks,
>> >
>> > Suzanne
>> > --
>> > no matter where you go, there you are.
>>
>>
>>
January 24, 2011 10:20:02 AM

Great discussion are out there and help me a lot to figure out my issues related to ou, and other kind of application hosting[/URL] issues. I'm also having one more prob and that is i can't access my documents(specially excell and word) to my throuh my remote host, is someone here who can suggest me something about this issue.
However, I just want to give thanks to all the guys which made this discussion luckiest for me.
February 3, 2011 10:24:33 AM

This topic has been closed by Buwish
!