We are running a strange AD constellation here, where the same logon script is defined within the local group policy on each server (don't ask me for the reason, it wasn't my idea).

Then an (AD-) GPO (lets call it GPO_A) got linked which, besides other things, configured loopback processing to merge mode. GPO_A nor any other GPOs (except the local one) define any user or computer scripts.

Also Turn off Local Group Policy objects processing is nowhere defined.

After a gpupdate and reboot of the server the mentioned logon script gets executed twice and causes several incidents. Gpresult /h c:\temp\rsop.html lists this script twice:

enter image description here

As our local GPOs get's configured via an SCCM packet I thought that someone might accidently had run a job and redistributed this package but no, that's not the case (checked the logs).

So I thought the local GPO might have became somehow corrupted and therefor resetted it using the following procedure:

CMD> secedit /configure /cfg %windir%\inf\defltbase.inf /db defltbase.sdb /verbose
CMD> RD /S /Q "%WinDir%\System32\GroupPolicyUsers"
CMD> RD /S /Q "%WinDir%\System32\GroupPolicy"
CMD> gpupdate /force & shutdown /R /T 0

Then I manually reconfigured the user logon script and now nothing get's executed anymore... (yes, rebooted, yes gpupdate'd /force).

Can someone please shed some light on this? What am I doing wrong here?


Deleting c:\windows\security\database\secedit.sdb and rebooting did the trick...

|improve this answer|||||

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.