Drive Mapping: Migrate from legacy Login Script to GPO


We have a W2003 AD server, which runs standard Login Script for generic drive mappings (net use...etc) and a call to Kixtart for Group Membership based mapping.

We like to move away from script based logins as it has become a bit messy to maintain, but I am not sure how to implement the group based mappings in GPO.

We have mobile users on MS VPN (IPSEC) as well as the standard desktop users so the solution has to work equally well for both.

What is the best way of doing this, and are there any caveats I need to keep in mind?

Thanks much
LVL 31
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Peter HutchisonSenior Network Systems SpecialistCommented:
Ideally, you would use Group Policy Preferences to configure drive settings etc.
For it to work, the AD server should be Windows 2008 or later, clients should be Windows 7.

There is an addon for Windows XP or 2003 SP1 machines to enable GPP: 

Settings can be set in User Configuration, Preferences, Windows Settings, Drive Maps.
Will SzymkowskiSenior Solution ArchitectCommented:
What I would recommend is using GGP (group policy preferences) to distribute mapped drives. This will eliminate the need for logon scripts. If you have Windows XP/Vista clients in your environment you will need to install "Client Side Extensions" in order for this to work.

Take a look at the below links for more details/examples.


Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
captainAuthor Commented:
Thank you both for the reply, I will check this out and feed back Monday.
captainAuthor Commented:
Time flies as always.

Thanks for the answers these tick all the boxes.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.