Windows XP Logon script location

[lynchjo]

Hello,

User A experiences a logon script every time he logs his machine. This particular logon script is old and I want to get rid of it but I can't seem to locate it. Here are some details:

Script follows user when he logs into other machines on the network so I know it is not local to his primary machine.
Script is not located in AD\GPO in either computer(Scripts:Startup/Shutdown) or user(Scripts:Logon/Logoff) setting locations.

Here are results from running gpresult from his machine:

Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.
C:\Documents and Settings\pmcclain>gpresult
Microsoft (R) Windows (R) XP Operating System Group Policy Result tool v2.0
Copyright (C) Microsoft Corp. 1981-2001
Created On 7/13/2011 at 2:02:08 PM

RSOP results for ABOFA\pmcclain on PATSYS : Logging Mode
---------------------------------------------------------
OS Type: Microsoft Windows XP Professional
OS Configuration: Member Workstation
OS Version: 5.1.2600
Domain Name: ABOFA
Domain Type: Windows 2000
Site Name: Default-First-Site-Name
Roaming Profile:
Local Profile: C:\Documents and Settings\pmcclain
Connected over a slow link?: No

COMPUTER SETTINGS
------------------
CN=PATSYS,CN=Computers,DC=abofa,DC=com
Last time Group Policy was applied: 7/13/2011 at 1:05:06 PM
Group Policy was applied from: abinetserver02.abofa.com
Group Policy slow link threshold: 500 kbps
Applied Group Policy Objects
-----------------------------
Default Domain Policy
SUSAdmin
Local Group Policy
The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Folder Redirection
Filtering: Not Applied (Empty)
The computer is a part of the following security groups:
--------------------------------------------------------
BUILTIN\Administrators
Everyone
Debugger Users
BUILTIN\Users
NT AUTHORITY\NETWORK
NT AUTHORITY\Authenticated Users
PATSYS$
Domain Computers

USER SETTINGS
--------------
CN=Patrick McClain,OU=users,OU=Art Bookbinders,DC=abofa,DC=com
Last time Group Policy was applied: 7/13/2011 at 1:16:07 PM
Group Policy was applied from: abinetserver02.abofa.com
Group Policy slow link threshold: 500 kbps
Applied Group Policy Objects
-----------------------------
Internet Explorer
Default Domain Policy
Folder Redirection
The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Turn off Windows Firewall
Filtering: Not Applied (Empty)
Local Group Policy
Filtering: Not Applied (Empty)
SUSAdmin
Filtering: Not Applied (Empty)
The user is a part of the following security groups:
----------------------------------------------------
Domain Users
Everyone
Debugger Users
BUILTIN\Administrators
Remote Desktop Users
BUILTIN\Users
NT AUTHORITY\INTERACTIVE
NT AUTHORITY\Authenticated Users
LOCAL
Document Publisher
pmcclain
pmcclain
C:\Documents and Settings\pmcclain>

Any assistance locating this script would be very helpful to me.

Thanks in advance

 

[EvanDavis]

As the script follows the ueser on the network no matter what machine he logs on says its roaming profile, so the script would be located on the network server with the users profile. HAve a read of this

 

[lynchjo]

Evan,

~Thanks for the quick response.

It would make sense that it is part of the users roaming profile although we use local profiles. I attached a screen shot of the users AD properties which does have "startup" listed in his logon script but I can't where this batch file is located. Can you help?

Thanks again Evan

 

[lynchjo]

Evan, any other thoughts?

Thanks