Access to the Desktop Is Granted Before Logon Scripts Complete

Article translations Article translations
Article ID: 275506 - View products that this article applies to.
This article was previously published under Q275506
This article has been archived. It is offered "as is" and will no longer be updated.
Expand all | Collapse all

SYMPTOMS

When you configure logon scripts, there are settings that allow an administrator to control the maximum time the logon script is allowed to run, and whether to run the logon script synchronously. When a logon script is run synchronously, the user does not have access to the desktop until the logon script terminates.

The setting that controls the length of time a logon script is allowed to run is "Maximum wait time for Group Policy scripts", and this setting is in seconds. If this setting is greater than 10 minutes (600 seconds), and the script is running synchronously, the user is given access to their desktop after 10 minutes even though the logon script has not completed. For a synchronous logon script, the user should not have access to their desktop until after the logon script terminates.

CAUSE

This problem can occur because a timer is hard coded to a 10 minute setting. When this timer activates, the desktop is presented to the user, even though the logon script is still running.

RESOLUTION

To resolve this problem, obtain the latest service pack for Windows 2000. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:
260910 How to Obtain the Latest Windows 2000 Service Pack
The English version of this fix should have the following file attributes or later:
   Date        Time    Version        Size     File name
   --------------------------------------------------------
   10/26/2000  03:07p  5.0.2195.2578  177,936  Winlogon.exe
				

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article. This problem was first corrected in Windows 2000 Service Pack 2.

MORE INFORMATION

For additional information about how to install Windows 2000 and Windows 2000 hotfixes at the same time, click the article number below to view the article in the Microsoft Knowledge Base:
249149 Installing Microsoft Windows 2000 and Windows 2000 Hotfixes
The timer is no longer a hard-coded value. This hotfix modifies the timer so it is now "aware" of the "Maximum wait time for Group Policy scripts" setting.

Properties

Article ID: 275506 - Last Review: October 21, 2013 - Revision: 3.4
APPLIES TO
  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Professional Edition
Keywords: 
kbnosurvey kbarchive kbhotfixserver kbqfe kbbug kbenv kbfix kbui kbwin2000presp2fix KB275506

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com