Running Service/Program through GPO

PashPash Member Posts: 1,600 ■■■■■□□□□□
in AD Infra 70-294
I have created a policy which should force a service to start when logging into the domain. However it doesnt seem to start the service after i have forced the update and restarted the client. The service does start if I log on locally onto the machine, using the local administrator account.

Any ideas?

Cheers,

EDIT: The domain account is just a plain domain users account BTW, the service doesnt run when logging on with this account.
DevOps Engineer and Security Champion. https://blog.pash.by - I am trying to find my writing style, so please bear with me.
· Share on FacebookShare on Twitter

Comments

  • sprkymrksprkymrk Member Posts: 4,884 ■■■□□□□□□□
    Is it a custom service? Does a regular user have permission to start the service? Any clues in the event logs?
    All things are possible, only believe.
    · Share on FacebookShare on Twitter
  • SieSie Member Posts: 1,195
    Just another quick question, you say it works logged in locally so is it a local policy or a domain policy?

    And if local is there a conflicting domain policy?
    Foolproof systems don't take into account the ingenuity of fools
    · Share on FacebookShare on Twitter
  • PashPash Member Posts: 1,600 ■■■■■□□□□□
    sprkymrk wrote:
    Is it a custom service? Does a regular user have permission to start the service? Any clues in the event logs?

    Thank you sprkymrk it was a permissions issue. Now the service runs when the user logs on.

    Cheers,
    DevOps Engineer and Security Champion. https://blog.pash.by - I am trying to find my writing style, so please bear with me.
    · Share on FacebookShare on Twitter
  • sprkymrksprkymrk Member Posts: 4,884 ■■■□□□□□□□
    Your welcome. :)
    You would have figured it out pretty soon I'm sure. I already had 2 cups of coffee before I saw your question, so I may have had an unfair advantage over you. Is tea still more popular in the UK than coffee?
    All things are possible, only believe.
    · Share on FacebookShare on Twitter
  • SieSie Member Posts: 1,195
    sprkymrk wrote:
    Is tea still more popular in the UK than coffee?

    Not where i work!! icon_lol.gif

    Sooner they invent a coffee drip the better icon_wink.gif
    Foolproof systems don't take into account the ingenuity of fools
    · Share on FacebookShare on Twitter
  • PashPash Member Posts: 1,600 ■■■■■□□□□□
    Sie wrote:
    Just another quick question, you say it works logged in locally so is it a local policy or a domain policy?

    And if local is there a conflicting domain policy?

    Sorry my explanation was terrible. It is a domain policy. I created a new policy and applied it to the relevant OU and used the policy to start a service for a media devicelock software program, the reason it would work for the local account is because I set the policy on the computer configuration settings rather than the user icon_redface.gif

    Microsoft AD is my weakness, hands down, so Im glad im encountering these problems.

    Cheers,
    DevOps Engineer and Security Champion. https://blog.pash.by - I am trying to find my writing style, so please bear with me.
    · Share on FacebookShare on Twitter
  • PashPash Member Posts: 1,600 ■■■■■□□□□□
    Sie wrote:
    sprkymrk wrote:
    Is tea still more popular in the UK than coffee?

    Not where i work!! icon_lol.gif

    Sooner they invent a coffee drip the better icon_wink.gif

    HaHA me too, they have been saying in the news tea is even more healthier than water for you, but like hell im drinking tea...i need my coffee fix icon_twisted.gif
    DevOps Engineer and Security Champion. https://blog.pash.by - I am trying to find my writing style, so please bear with me.
    · Share on FacebookShare on Twitter
Sign In or Register to comment.