Err Msg: "Bad Command or Filename" on Windows NT Login Script (151401)

CAUSE

Changing the Advanced User Rights setting for "Bypass Traverse Checking" in User Manager on the Windows NT Server domain controller can result in this error message.

By default, the group Everyone has this user right. This can be changed to limit this right to particular users or groups.

Bypass Traverse Checking

With Bypass Traverse Checking, the user can traverse a directory tree even if the user has no other rights to access that directory. Bypass Traverse Checking denies access to users in POSIX applications.

Bypass Traverse Checking allows users to access Windows NT Server shares without having to have explicit rights to the directory structure above that share, which is located on the Windows NT Server. Once the group Everyone is removed from this right, users not only have to have permissions to a share in order to access that share(and possibly NTFS permissions related to that share), but they also have to have been granted NTFS permissions to the rest of the Windows NT Server's directory structure (which does not mean that the entire directory tree needs to be shared).

Bypass Traverse Checking allows Windows NT to skip the checking of permissions higher up in the directory structure for a user and apply only the permissions granted by the share and the NTFS permissions for the directory (or directories) shared.