Solved

How do I restrict home folders in group policy based on a computer?

Posted on 2010-09-15
7
1,066 Views
Last Modified: 2012-05-10
Basically my problem is,  I am using a couple external harddrives as cheap offsite backup.  And everytime I try to plug in a drive it trys to give it the address of H: which happens to be set as a drive map to the home folder for all users.  I was wondering if there was a way in active directory to not allow mapped drives on a machine, or to disable home folders on a machine.

Thanks,
0
Comment
Question by:omnipotentone
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
7 Comments
 
LVL 53

Expert Comment

by:Will Szymkowski
ID: 33683852
You can do this with a GPO...
Configure the settings in GP User Configuration\Administrative Templates\Windows Components\Windows Explorer. Remove "Map Network Drive" and "Disconnect Network Drive".

This will remove the Map Network Drive and Disconnect Network Drive commands from the toolbar and Tools menus in Explorer and My Network Places and removes these commands from menus that appear when you right-click the Windows Explorer or My Network Places icons

Ref link - http://techrepublic.com.com/5208-6230-0.html;jsessionid=6960E568EB2C6878340A6CDA8B371B39?forumID=101&threadID=218237&messageID=2209916&tag=content;leftCol

hope this helps~!
0
 
LVL 31

Accepted Solution

by:
Justin Owens earned 500 total points
ID: 33683907
If you are wanting to disable the H mapping on one machine every time you log in, you can set up a logon script which has a "if computername = whatever" type logic and then disconnect the mapped drive.  This is done differently in batch, vbscript, etc, so knowing your logon script language would be needed here.  That is the quick, ugly fix.

You can add that machine to an AD security group and then link a logon script to that group to accomplish the same thing.

What you cannot do is set up a GPO inside AD which tells a computer "drive letter H is unavailable for network mapping but ok for removable media".

Justin
0
 
LVL 2

Author Comment

by:omnipotentone
ID: 33683935
No sorry that doesn't help, the drives are mapped as the user logs in.  Thanks though.
0
Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

 
LVL 31

Expert Comment

by:Justin Owens
ID: 33683962
That is why I suggested a separate (or appended) logon scrip which will un-map the drive after it is mapped. :)
0
 
LVL 2

Author Comment

by:omnipotentone
ID: 33683978
Justin,
 
That isn't a bad idea.  I know it will work...
 
Anyone else have anything better?  I thought of tweak ui and was going to test that.
0
 
LVL 74

Expert Comment

by:Glen Knight
ID: 34689994
This question has been classified as abandoned and is being closed as part of the Cleanup Program. See my comment at the end of the question for more details.
0

Featured Post

The Eight Noble Truths of Backup and Recovery

How can IT departments tackle the challenges of a Big Data world? This white paper provides a roadmap to success and helps companies ensure that all their data is safe and secure, no matter if it resides on-premise with physical or virtual machines or in the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

This article outlines the process to identify and resolve account lockout in an Active Directory environment.
In-place Upgrading Dirsync to Azure AD Connect
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

732 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question