Logon Script Not Executed After User Added To Domain Admins
Hi, when I tried to add a user to Domain Admins, the Logon Script no longer runs whenever the User login. Before I added the user to Domain Admin (Domain Users), the logon script work perfectly (I've checked with "gpresult /v" and the script wasn't executed). How to fix this problem? Thanks in advance.
September 2nd, 2015 4:07am

Please whether the policy has security filtering restricted for domain admins.
Free Windows Admin Tool Kit Click here and download it now
September 2nd, 2015 4:42am

The script was executed for Built In Administrator (also included in Domain Administrator), here is the Security Filtering:

I have checked the "Apply group policy" permission.

September 2nd, 2015 6:25am

Hi jazzyhacker,

Based on my researxh, it may be related to UAC. If a user belongs to the domain admin group and UAC is enabled the logon script will not run in the user context but the admin context instead. So, the mapping is successfully happening, but for a different context, this is the reason for this odd behavior.

https://technet.microsoft.com/en-us/library/Ee844140%28v=WS.10%29.aspx?f=255&MSPPError=-2147217396

Could you please add the user directly to the list for the script execution.

Best Regards,

Mary Dong

Free Windows Admin Tool Kit Click here and download it now
September 3rd, 2015 1:20am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics