组策略脚本处理
在处理组策略过程中,脚本客户端扩展不仅负责启动用于计算机启动和关闭的脚本,还负责启动用于用户登录和注销的脚本。
更正脚本扩展失败
可能的解决方法包括:
登录和注销脚本:确保用户具有读取和运行脚本的适当文件权限。用户必须具有读取和执行 NTFS 的权限。如果脚本位于网络共享位置,则用户还必须具有读取共享的权限。
启动和关闭脚本:确保计算机帐户具有读取和运行脚本的适当文件权限。计算机必须具有读取和执行 NTFS 的权限。如果脚本位于网络共享位置,则计算机还必须具有读取共享的权限。
确认用户或计算机可以从 %SystemRoot%\system32 文件夹启动脚本。
Target | Microsoft.Windows.GroupPolicy.2008.ScriptsCSE | ||
Parent Monitor | System.Health.AvailabilityState | ||
Category | StateCollection | ||
Enabled | True | ||
Alert Generate | True | ||
Alert Severity | MatchMonitorHealth | ||
Alert Priority | Normal | ||
Alert Auto Resolve | True | ||
Monitor Type | Microsoft.Windows.SingleEventLogManualReset2StateMonitorType | ||
Remotable | True | ||
Accessibility | Public | ||
Alert Message |
| ||
RunAs | Default |
<UnitMonitor ID="Microsoft.Windows.GroupPolicy.2008.ScriptsCSE.GroupPolicyScriptsProcessing.System.Correctascriptsextensionfailure.EventBased.UnitMonitor" Accessibility="Public" Enabled="onEssentialMonitoring" Target="Microsoft.Windows.GroupPolicy.2008.ScriptsCSE" ParentMonitorID="SystemHealth!System.Health.AvailabilityState" Remotable="true" Priority="Normal" TypeID="Windows!Microsoft.Windows.SingleEventLogManualReset2StateMonitorType" ConfirmDelivery="true">
<Category>StateCollection</Category>
<AlertSettings AlertMessage="Microsoft.Windows.GroupPolicy.2008.ScriptsCSE.GroupPolicyScriptsProcessing.System.Correctascriptsextensionfailure.EventBased.UnitMonitor.AlertMessage">
<AlertOnState>Error</AlertOnState>
<AutoResolve>true</AutoResolve>
<AlertPriority>Normal</AlertPriority>
<AlertSeverity>MatchMonitorHealth</AlertSeverity>
<AlertParameters>
<AlertParameter1>$Data/Context/EventDescription$</AlertParameter1>
</AlertParameters>
</AlertSettings>
<OperationalStates>
<OperationalState ID="ManualReset" MonitorTypeStateID="ManualResetEventRaised" HealthState="Success"/>
<OperationalState ID="NegativeHealthState" MonitorTypeStateID="EventRaised" HealthState="Error"/>
</OperationalStates>
<Configuration>
<ComputerName>$Target/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<LogName>System</LogName>
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery>PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>Microsoft-Windows-GroupPolicy</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery>EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>1130</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</Expression>
</Configuration>
</UnitMonitor>