?
Solved

VB Script to Map Drives works on some accounts and not others

Posted on 2010-09-03
7
Medium Priority
?
255 Views
Last Modified: 2012-08-13
Hi Experts,

I have the attached VB Script which has been working. However recently I started having problems where it would create the mapped drives for some accounts and not others. No error messages. Please advise on what could be wrong.

Thanks MapNetworkDrives.vbs
0
Comment
Question by:cimani1000
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2
7 Comments
 
LVL 11

Expert Comment

by:sighar
ID: 33602458
Are the users that do not get the drives mapped added to the group in a group and not individually? I've had this and then it was that we added a group to the group that was supposed to get the drives. VBS cannot expand memberlist of another group.
0
 

Author Comment

by:cimani1000
ID: 33602492
They are mapped as a group. Sometimes it maps other times it does not
0
 
LVL 11

Expert Comment

by:sighar
ID: 33602499
Is it all groups or specific groups? Same users always or random users?
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 

Author Comment

by:cimani1000
ID: 33602509
Specific groups e.g IT is always OK, HR, Customer Care SOMETIMES not always doesn't map
0
 
LVL 11

Expert Comment

by:sighar
ID: 33602527
No user is is two groups? And you didn't answer if it always the same users or random users...
0
 
LVL 11

Expert Comment

by:sighar
ID: 33602528
What does the error log on client computers say?
0
 
LVL 8

Accepted Solution

by:
spinzr0 earned 1000 total points
ID: 33603391
Are you sure they have permissions to the shares and its not a permissions issue?  As a note, turn off the line ON ERROR RESUME NEXT and the error messages will pop up to tell you what went wrong.

Also, if you are using any nested groups you can enumarate all groups the person is a member of first, then process that list rather than just the top level groups.  Here is a sample that I've used.  It adds all group memberships to the dictionary oGroupMembership.  Then, you can process those as:

For Each oGroup in oGroupMembership
     Select Case oGroup
     .....
Next
Set oGroupMembership = CreateObject("Scripting.Dictionary")
oGroupMembership.CompareMode = vbTextCompare
For Each oGroup In oADUser.Groups
    RecurseGroup(oGroup.ADsPath)
Next


Function RecurseGroup(sADsPath)
    On Error Resume Next
    Set oRGroup = GetObject(sADsPath)
    oGroupMembership.Add Replace(oRGroup.Name,"CN=",""), True
    oRGroup.GetInfo
    Err.Clear
    cMemberOf = oRGroup.GetEx("memberOf")
    If Err.Number <> 0 Then Exit Function
    For Each sMemberOf In cMemberOf
        RecurseGroup("LDAP://" & sMemberOf)
    Next
End Function

Open in new window

0

Featured Post

Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article demonstrates probably the easiest way to configure domain-wide tier isolation within Active Directory. If you do not know tier isolation read https://technet.microsoft.com/en-us/windows-server-docs/security/securing-privileged-access/s…
Uncontrolled local administrators groups within any organization pose a huge security risk. Because these groups are locally managed it becomes difficult to audit and maintain them.
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …
Suggested Courses
Course of the Month11 days, 22 hours left to enroll

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question