I have a Windows 2008 DC with a logon script in the default policy. This script has been tested and works if executed manually for admins and users.
However, when I login with an administrator it doesn't get executed. But it works fine for normal users.
The policy is supposed to be applied to all authenticated domain users. Is there a limitation for admin users or am I doing something wrong?
DC is Windows 2008, Clients are all Win 7
I have found the reason for this phenomenon,but unfortunately no satisfying solution.
First of all, if a user belongs to the domain admin group and UAC is enabled the logon script will not run in the user context but the admin context instead. So, the mapping is successfully happening, but for a different context, this is the reason for this odd behavior.
I have found some workarounds for this issue, but none of them really worked for me, which is why I simply have accepted that if you want to map network shares under Win7 make sure you aren't local or domain admin.
This issue is well known to Microsoft.
There is a much more comfortable way to avoid the logon script and using Group Policy settings instead.
Go to User Configuration -> Preferences -> Windows Settings -> Drive Maps and do all the work here. This seems to solve the issue with administrator users and UAC and works just fine for me.