Solved

Universal Groups - mapping drives

Posted on 2008-10-27
6
374 Views
Last Modified: 2008-11-03
I have a Active Directory forest that I am attempting to map a drive for a couple of Universal groups that are nested within a DL Group.

I have 2 universal groups that are nested within a DL group. The DL group is listed in the login script but does not run. (I know becasue I have a Wscript Echo that should appear when the drive is mapped).

If I add the user directly to the DL group, the drive mapping works but if I remove it, nothing. The user is a member of both universal groups.

What am I missing?
0
Comment
Question by:broberc6
  • 3
  • 3
6 Comments
 
LVL 30

Expert Comment

by:LauraEHunterMVP
ID: 22812488
What logic are you using to detect group membership within your login script? Not all memberof tests are able to chase nested group memberships.

See the following code listings for examples of group membership tests in login scripts that will test for nested memberships:

http://www.rlmueller.net/freecode1.htm
0
 

Author Comment

by:broberc6
ID: 22812674
Below is the script I using for all other working mappings

if InStr(vUserGroups, Lcase("MapXdrive")) Then
WshNetwork.MapNetworkDrive "X:","\\server1\Data\Executive",False
WScript.Echo("Script Ran! ")
End If
0
 
LVL 30

Expert Comment

by:LauraEHunterMVP
ID: 22812710
Depends on how you are defining vUserGroups. Chances are good that the logic you are using does not test for nested group memberships. See my previous for examples on how to do that.
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 

Author Comment

by:broberc6
ID: 22813900
This is how it is declared in the login script
0
 

Author Comment

by:broberc6
ID: 22813902
vUserGroups=LCase(Join(oLogonUser.MemberOf))
0
 
LVL 30

Accepted Solution

by:
LauraEHunterMVP earned 125 total points
ID: 22813957
Simply searching the contents of the memberOf attribute will not recurse through nested group memberships. Again, see my previous for examples of how to do so.
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

789 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question