AD Logon Script

sky-knight · 10-01-2008, 02:46 PM

I have just deployed the vbs script into group policy. I can see wscript.exe running on the clients now. Is there a way to test this software any further other than wait for a report?

The live event logs in the rack are still showing raw IP's.

tbelote · 10-01-2008, 03:14 PM

Yes goto https://untangle_ip_address/adpb/debug

or something like that.

It should show a list of all the usernames and associated ip addreses.

sky-knight · 10-01-2008, 03:24 PM

Very nice thanks, that link shows IP, Username, and Machine Name.

sky-knight · 10-01-2008, 03:28 PM

WHOAOHAHAHAHA HOLD THE PHONE!!

This page you pointed me at doesn't require any authentication!! We've just exposed internal network configuration data and usernames to the FREAKING INTERNET!

sky-knight · 10-01-2008, 03:29 PM

Never mind... it just cached my credentials.

tbelote · 10-01-2008, 03:56 PM

Yes, it should require you login as admin at least once, somewhere. Let me know though if you find a way it doesn't

sky-knight · 10-01-2008, 05:53 PM

So now I guess we get to find out if this thing can keep up with machines connected to the network twice.

Yes, I have id10t users that insist on being on the wire and wireless segments at the same time.

JGrubbs · 10-20-2008, 12:07 PM

What is the best way to get the users who are not showing up on this list to be included? Simply reboot their workstations?

mdh · 10-20-2008, 12:12 PM

They may be excluded for other reasons. To be on the list, the user must satisfy the following criteria:

1. Normal account
2. Not expired
3. Not locked out
4. Password is required
5. They must be able to change their own password

JGrubbs · 10-20-2008, 02:43 PM

I fixed it!! For some reason the script was missing from the Group Policy Management where I had it setup before. I'm not sure how it got removed, but that is why the rest of our users were not showing up in the list. I just set it back up and rebooted my system and now I am in the list.

10-01-2008, 02:46 PM	#1 (permalink)
sky-knight Join Date: Apr 2008 Location: Phoenix, AZ URLs submitted: 8 Posts: 15,454	AD Logon Script I have just deployed the vbs script into group policy. I can see wscript.exe running on the clients now. Is there a way to test this software any further other than wait for a report? The live event logs in the rack are still showing raw IP's. __________________ Rob Sandling, BS:SWE, MCP Intouch Technology Phone: 480-272-9889 rob@intouchtechllc.com UntangleAppliances.com Phone: 866-794-8879

10-01-2008, 03:14 PM	#2 (permalink)
tbelote Master Untangler Join Date: Oct 2007 Posts: 328	Yes goto https://untangle_ip_address/adpb/debug or something like that. It should show a list of all the usernames and associated ip addreses. __________________ Thomas Belote Untangle

10-01-2008, 03:24 PM	#3 (permalink)
sky-knight Join Date: Apr 2008 Location: Phoenix, AZ URLs submitted: 8 Posts: 15,454	Very nice thanks, that link shows IP, Username, and Machine Name. __________________ Rob Sandling, BS:SWE, MCP Intouch Technology Phone: 480-272-9889 rob@intouchtechllc.com UntangleAppliances.com Phone: 866-794-8879

10-01-2008, 03:28 PM	#4 (permalink)
sky-knight Join Date: Apr 2008 Location: Phoenix, AZ URLs submitted: 8 Posts: 15,454	WHOAOHAHAHAHA HOLD THE PHONE!! This page you pointed me at doesn't require any authentication!! We've just exposed internal network configuration data and usernames to the FREAKING INTERNET! __________________ Rob Sandling, BS:SWE, MCP Intouch Technology Phone: 480-272-9889 rob@intouchtechllc.com UntangleAppliances.com Phone: 866-794-8879

10-01-2008, 03:29 PM	#5 (permalink)
sky-knight Join Date: Apr 2008 Location: Phoenix, AZ URLs submitted: 8 Posts: 15,454	Never mind... it just cached my credentials. __________________ Rob Sandling, BS:SWE, MCP Intouch Technology Phone: 480-272-9889 rob@intouchtechllc.com UntangleAppliances.com Phone: 866-794-8879

Protect

Filter

Perform

Connect

Manage

Add-Ons

10-01-2008, 03:56 PM	#6 (permalink)
tbelote Master Untangler Join Date: Oct 2007 Posts: 328	Yes, it should require you login as admin at least once, somewhere. Let me know though if you find a way it doesn't __________________ Thomas Belote Untangle

10-01-2008, 05:53 PM	#7 (permalink)
sky-knight Join Date: Apr 2008 Location: Phoenix, AZ URLs submitted: 8 Posts: 15,454	So now I guess we get to find out if this thing can keep up with machines connected to the network twice. Yes, I have id10t users that insist on being on the wire and wireless segments at the same time. __________________ Rob Sandling, BS:SWE, MCP Intouch Technology Phone: 480-272-9889 rob@intouchtechllc.com UntangleAppliances.com Phone: 866-794-8879

10-20-2008, 12:07 PM	#8 (permalink)
JGrubbs Master Untangler Join Date: Apr 2008 URLs submitted: 3 Posts: 106	What is the best way to get the users who are not showing up on this list to be included? Simply reboot their workstations?

10-20-2008, 12:12 PM	#9 (permalink)
mdh Join Date: Aug 2007 URLs submitted: 171 Posts: 4,802	They may be excluded for other reasons. To be on the list, the user must satisfy the following criteria: 1. Normal account 2. Not expired 3. Not locked out 4. Password is required 5. They must be able to change their own password __________________ This space reserved for profound thought.....which does happen on occasion."

10-20-2008, 02:43 PM	#10 (permalink)
JGrubbs Master Untangler Join Date: Apr 2008 URLs submitted: 3 Posts: 106	I fixed it!! For some reason the script was missing from the Group Policy Management where I had it setup before. I'm not sure how it got removed, but that is why the rest of our users were not showing up in the list. I just set it back up and rebooted my system and now I am in the list. Last edited by JGrubbs; 10-20-2008 at 03:07 PM..