Link to home
Start Free TrialLog in
Avatar of valheru_m
valheru_mFlag for United States of America

asked on

Windows 7 Group Policy Preference Drive Mappings with supplied username not working properly

We have a mixed Win7/WinXP & Server 2008 R2 environment with Drive Maps handled via Group Policy.  The drive maps to domain servers work fine, but we also have a few AIX servers with Samba shares that need to be mapped as well. These shares obviously dont have directory authentication so we have the GPs setup to just use a single username/password we configured in samba, which is fine for our security purposes on that share.  

The problem is that when the drives map on the Win7 machines at user login, they show up in Explorer as disconnected, and when the user clicks on the drive it requests the username and password for the share, even though we've explicitly configured the credentials in the group policy preference. If you type in the same credentials we've configured in the GP, the drive proceeds to connect and work just fine. We can't have the users have to retype credentials for individual drive mappings whenever they reboot.  Any ideas why the supplied credentials dont seem to work?  The XP machines dont have this problem.
Avatar of brian_vt_hokie
brian_vt_hokie
Flag of United States of America image

Have you tried disabling SMB Signing?  We've run into similar issues with Windows 7 machines and non SMB 2.0 shares.  Disabling SMB signing has worked in most of those cases.  If not, you can also try disabling SMB 2.0.

[HKEY_LOCAL_MACHINE \System \CurrentControlSet \Services \LanManWorkstation \Parameters]
EnableSecuritySignature = 0 (Disabled = 0, Enabled = 1)
RequireSecuritySignature= 0 (Disabled = 0, Enabled = 1)

How to Disable SMB 2.0
http://www.petri.co.il/how-to-disable-smb-2-on-windows-vista-or-server-2008.htm

1.Run "regedit" on Windows Server 2008 based computer.
2.Expand and locate the sub tree as follows.
HKLM\System\CurrentControlSet\Services\LanmanServer\Parameters
3.Add a new REG_DWORD key with the name of "Smb2" (without quotation mark)
Value name: Smb2
Value type: REG_DWORD
0 = disabled
1 = enabled4.Set the value to 0 to disable SMB 2.0, or set it to 1 to re-enable SMB 2.0.
5.Reboot the server.
Avatar of valheru_m

ASKER

Thanks for your response.

We've already got Signing disabled via Group Policy.
 User generated image
I've disabled SMB2 as per your link, but the issue remains.  Other ideas?

Thanks!
ASKER CERTIFIED SOLUTION
Avatar of ee_auto
ee_auto

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial