Thomas N
asked on
GPO and drive mapping
Do you think using GPO preferences "Drive Maps" will be the best and most importantly the easiest way to map a drive in a AD environment? Thanks
Drive mappings are the easiest to manage (imo). And they support any OS from XP to 8+
GP preferences are very reliable in nature and can work on OS starting from Windows XP
On windows XP you need to install CSE patch, in order to work with GP Preferences
http://www.microsoft.com/en-in/download/details.aspx?id=3628
Works well than any batch script \ logon script
Only thing to mention here, in the GP preference drive map item properties on common tab, you must select "run in logged on user security context"
If you do not select this checkbox, drive mapping will fail because user has got drive mapping permissions and GP Preferences by default run with local system account and local system account on client do not have permissions on share folders on server
Mahesh
On windows XP you need to install CSE patch, in order to work with GP Preferences
http://www.microsoft.com/en-in/download/details.aspx?id=3628
Works well than any batch script \ logon script
Only thing to mention here, in the GP preference drive map item properties on common tab, you must select "run in logged on user security context"
If you do not select this checkbox, drive mapping will fail because user has got drive mapping permissions and GP Preferences by default run with local system account and local system account on client do not have permissions on share folders on server
Mahesh
It kind of depends on your environment, but in general I'd agree with the comments above. Drive mapping by GPO preferences works very well, particularly if you need different drives mapped for different groups of users. Also, it's much easier to manage than using login scripts. In the "olden" days I used to have to have different login scripts for different groups of users or one very complicated login script for many of my client sites because different users needed slightly different mappings. With GPO preferences, you can use the Item-level targeting function to specify different groups of users, computers, OS's, even IP address range and many other item-level attributes to target specific groups. This makes it extremely flexible and granular, especially in a large or diverse environment.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Why only points for me?
Good question! I wasn't going to raise it myself because I'm not that much of a points hog, but it did kinda surprise me. Seems like they should be spread around a bit more since several of us agreed on the same solution.
If this is for all or most people then yes, GPO could be good idea, centrally managed.