Assign GPO depend on the Group Membership in windows 2008 R2 environment

ACS2012 used Ask the Experts™
Dear All,

I’m looking for a way to configure the GPO to do the following:
Assign a “Map Network Drive” for users, but what I’m looking for is to assign the Map depend on the group membership, for example:

Jon ... Member of Sales group … will have “sales” Map Network Drive when he is login.
Ram … member of ACC group … will have “ACC” Map Network Drive when he is login.

So the group policy will check the membership then assign the map.
Do I can implement that within the GPO (references GPO)?
I have only Windows 2008 R2 SP1 domain controllers in my environment.

Please help

Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Top Expert 2013
You have 2008 listed you can use group policy preferences to map drives and use item level targeting.  Great post from the AD team


remmett70Network Manager

Use .vbs script for logon script.

strDrive = "Z:"
strPath = "\\server\share"

Set objUser = CreateObject("ADSystemInfo")
Set CurrentUser = GetObject("LDAP://" & objUser.UserName)
strGroup = LCase(Join(CurrentUser.MemberOf))

Const AdGroup = "cn=Group Name"

If inStr(strGroup, lcase(AdGroup)) then
  objNetwork.MapNetworkDrive strDrive, strPath

Open in new window

Neil RussellTechnical Development Lead

YAK!! Forget VB Scripts.

Go with group policy preferences and Item Level Targeting.
Success in ‘20 With a Profitable Pricing Strategy

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden using our free interactive tool and use it to determine the right price for your IT services. Start calculating Now!

Another vote for GPP.  Any XP/Vista/2003 clients will require the GPP Client-Side Extensions to use GPPs.

Link to MS Downloads for Client Side Extensions for GPP

You can deploy them via WSUS also, they are in the console.


thanks all.

what if my OS clients are full updated, do i have to install the Client Side Extensions for GPP?
It's not a security update, but if you apply all, then you may be covered. If you use WSUS, you can report based on the KB ID.  You should make sure or some clients may not get the drive mappings as expected. Win7 clients don't need it.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial