Troubleshooting GlobalProtect client postvpnconnectcommand

[techguy87]

Hello Community,

for a customer we are trying to install the GlobalProtect client on 100 laptops. this works great the laptops connect to the netwerk using the globalprotect client. the problem we have that the postvpnconnectcommand is not running the command we want it to. it should be running an drivemapping batch file so users are able to access file server shares over the vpn using the formiliar driveletters. 

the error we get in the global protect client is: 

(T14272) 09/11/18 14:10:54:708 Debug( 471): sslvpn connect(38.120.138.24) succeed
(T14272) 09/11/18 14:10:54:708 Debug(7578): VPN tunnel is connected.
(T14272) 09/11/18 14:10:54:708 Debug(7582): Enable life time and create life time thread.
(T14272) 09/11/18 14:10:54:708 Debug( 25): create thread 0x69c with thread ID 18076
(T14272) 09/11/18 14:10:54:708 Debug(4733): --Set state to Connected
(T18076) 09/11/18 14:10:54:708 Debug(2816): LifeTimeThread starts
(T14272) 09/11/18 14:10:54:708 Debug(7738): SetVpnStatus called with new status=1, Previous Status=0
(T14272) 09/11/18 14:10:54:715 Debug(7983): Vpn event post-vpn-connect exists
(T14272) 09/11/18 14:10:54:732 Debug( 155): profileInfo username testuser1, profile path (null), server (null)
(T14272) 09/11/18 14:10:57:781 Debug(3174): Expanded c:\DoNotDelete\DriveMappings.cmd to c:\DoNotDelete\DriveMappings.cmd
(T14272) 09/11/18 14:10:57:788 Debug( 155): profileInfo username testuser1, profile path (null), server (null)
(T14272) 09/11/18 14:10:57:810 Debug(3174): Expanded c:\DoNotDelete\DriveMappings.cmd to c:\DoNotDelete\DriveMappings.cmd
(T14272) 09/11/18 14:10:57:810 Debug( 190): Vpn event post-vpn-connect has empty checksum
(T14272) 09/11/18 14:10:57:810 Debug( 193): Vpn event post-vpn-connect is valid
(T14272) 09/11/18 14:10:57:810 Debug(3017): Command file is "c:\DoNotDelete\DriveMappings.cmd". Parameters
(T14272) 09/11/18 14:10:57:810 Debug( 155): profileInfo username testuser1, profile path (null), server (null)
(T14272) 09/11/18 14:10:57:833 Debug(3039): Full path is "c:\DoNotDelete\DriveMappings.cmd"
(T14272) 09/11/18 14:10:57:833 Debug(3044): Full command is "c:\DoNotDelete\DriveMappings.cmd"
(T14272) 09/11/18 14:10:57:833 Error(3059): Failed to create process for "c:\DoNotDelete\DriveMappings.cmd", error: 2
(T14272) 09/11/18 14:10:57:834 Error(3121): Failed to launch command. Error 1008. Command c:\DoNotDelete\DriveMappings.cmd as admin, timeout 0.
(T14272) 09/11/18 14:10:57:834 Debug(3124): Result is false for run command c:\DoNotDelete\DriveMappings.cmd. as admin, timeout 0
(T14272) 09/11/18 14:10:57:834 Debug(4903): Set post-vpn-connect error message for gateway 38.120.138.24:7000: Failed executing post-vpn-connect action. 

the user testuser1 is used for testing. the user is domain admin so rights shouldnt be an issue. but some how we get the error above:   Error(3121): Failed to launch command. Error 1008. Command c:\DoNotDelete\DriveMappings.cmd as admin, timeout 0.

anyone a idea?

regards

[BPry]

@techguy87,

Can you post a screenshot of how you have the registry key configured. 

[Mick_Ball]

Hi @BPry, strange thing is this just happend on a device upgraded to win 10. The script to map drives worked for years.

you can run the script using the file location copied from reg via command prompt but GP fails with similar erors as posted earlier. It must be a permissions thing.... but cant check til next week. Any thoughts....

[BPry]

@Mick_Ball,

I'll have to do some digging and see if I can't find anything with it. All of ours are currently working, but it could be simply the fact that all of our scripts can run as the end-user without issues.