Troubleshooting GlobalProtect client postvpnconnectcommand

Reply
techguy87
L0 Member

Troubleshooting GlobalProtect client postvpnconnectcommand

Hello Community,

 

for a customer we are trying to install the GlobalProtect client on 100 laptops. this works great the laptops connect to the netwerk using the globalprotect client. the problem we have that the postvpnconnectcommand is not running the command we want it to. it should be running an drivemapping batch file so users are able to access file server shares over the vpn using the formiliar driveletters. 

 

the error we get in the global protect client is: 

 

(T14272) 09/11/18 14:10:54:708 Debug( 471): sslvpn connect(38.120.138.24) succeed
(T14272) 09/11/18 14:10:54:708 Debug(7578): VPN tunnel is connected.
(T14272) 09/11/18 14:10:54:708 Debug(7582): Enable life time and create life time thread.
(T14272) 09/11/18 14:10:54:708 Debug( 25): create thread 0x69c with thread ID 18076
(T14272) 09/11/18 14:10:54:708 Debug(4733): --Set state to Connected
(T18076) 09/11/18 14:10:54:708 Debug(2816): LifeTimeThread starts
(T14272) 09/11/18 14:10:54:708 Debug(7738): SetVpnStatus called with new status=1, Previous Status=0
(T14272) 09/11/18 14:10:54:715 Debug(7983): Vpn event post-vpn-connect exists
(T14272) 09/11/18 14:10:54:732 Debug( 155): profileInfo username testuser1, profile path (null), server (null)
(T14272) 09/11/18 14:10:57:781 Debug(3174): Expanded c:\DoNotDelete\DriveMappings.cmd to c:\DoNotDelete\DriveMappings.cmd
(T14272) 09/11/18 14:10:57:788 Debug( 155): profileInfo username testuser1, profile path (null), server (null)
(T14272) 09/11/18 14:10:57:810 Debug(3174): Expanded c:\DoNotDelete\DriveMappings.cmd to c:\DoNotDelete\DriveMappings.cmd
(T14272) 09/11/18 14:10:57:810 Debug( 190): Vpn event post-vpn-connect has empty checksum
(T14272) 09/11/18 14:10:57:810 Debug( 193): Vpn event post-vpn-connect is valid
(T14272) 09/11/18 14:10:57:810 Debug(3017): Command file is "c:\DoNotDelete\DriveMappings.cmd". Parameters
(T14272) 09/11/18 14:10:57:810 Debug( 155): profileInfo username testuser1, profile path (null), server (null)
(T14272) 09/11/18 14:10:57:833 Debug(3039): Full path is "c:\DoNotDelete\DriveMappings.cmd"
(T14272) 09/11/18 14:10:57:833 Debug(3044): Full command is "c:\DoNotDelete\DriveMappings.cmd"
(T14272) 09/11/18 14:10:57:833 Error(3059): Failed to create process for "c:\DoNotDelete\DriveMappings.cmd", error: 2
(T14272) 09/11/18 14:10:57:834 Error(3121): Failed to launch command. Error 1008. Command c:\DoNotDelete\DriveMappings.cmd as admin, timeout 0.
(T14272) 09/11/18 14:10:57:834 Debug(3124): Result is false for run command c:\DoNotDelete\DriveMappings.cmd. as admin, timeout 0
(T14272) 09/11/18 14:10:57:834 Debug(4903): Set post-vpn-connect error message for gateway 38.120.138.24:7000: Failed executing post-vpn-connect action. 

 

the user testuser1 is used for testing. the user is domain admin so rights shouldnt be an issue. but some how we get the error above:   Error(3121): Failed to launch command. Error 1008. Command c:\DoNotDelete\DriveMappings.cmd as admin, timeout 0.

 

anyone a idea?

 

regards

BPry
Cyber Elite

@techguy87,

Can you post a screenshot of how you have the registry key configured. 

MickBall
L7 Applicator

Hi @BPry, strange thing is this just happend on a device upgraded to win 10. The script to map drives worked for years.

you can run the script using the file location copied from reg via command prompt but GP fails with similar erors as posted earlier. It must be a permissions thing.... but cant check til next week. Any thoughts....

BPry
Cyber Elite

@MickBall,

I'll have to do some digging and see if I can't find anything with it. All of ours are currently working, but it could be simply the fact that all of our scripts can run as the end-user without issues. 

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!