mattmcg
asked on
GPO Drive mappings not working
I am trying to switch over from login script to GPO - Drive mappings using Item Level Targeting. I created a global security group for each department. The created a global security group for each drive letter. I then created a GPO for each drive letter that will be mapped. I have tried switching between Create and Update. Doing gpupdate /force after all changes. That has not worked. In Item level targeting I added both Security groups. For a full view of what I have done please read the attached HTM. I exported the configuration. Our domain functional level is set to Windows Server 2003.
For the purposes of this request I am concentrating on one GPO. The GPO is configured as follows:
Action Update
Properties
Letter R
Location \\stp60pfls001\outlook\
Reconnect Enabled
Label as \\stp60pfls001\outlook
Use first available Disabled
Hide/Show this drive Show
Hide/Show all drives Show
Common
Options
Stop processing items on this extension if No
an error occurs on this item
Run in logged-on user's security Yes
context (user policy option)
Remove this item when it is no longer applied No
Apply once and do not reapply No
Item-level targeting: Security Group
Attribute Value
bool AND
not 0
name PSP\R - stp60pfls001_outlook_usern ame
sid S-1-5-21-342123414-1712461 194-879972 363-5699
userContext 1
primaryGroup 0
localGroup 0
Item-level targeting: Security Group
Attribute Value
bool OR
not 0
name PSP\Networking
sid S-1-5-21-342123414-1712461 194-879972 363-5733
userContext 1
primaryGroup 0
localGroup 0
I don't understand why the drive I specified is not mapping.
Drive-Mappings.htm
For the purposes of this request I am concentrating on one GPO. The GPO is configured as follows:
Action Update
Properties
Letter R
Location \\stp60pfls001\outlook\
Reconnect Enabled
Label as \\stp60pfls001\outlook
Use first available Disabled
Hide/Show this drive Show
Hide/Show all drives Show
Common
Options
Stop processing items on this extension if No
an error occurs on this item
Run in logged-on user's security Yes
context (user policy option)
Remove this item when it is no longer applied No
Apply once and do not reapply No
Item-level targeting: Security Group
Attribute Value
bool AND
not 0
name PSP\R - stp60pfls001_outlook_usern
sid S-1-5-21-342123414-1712461
userContext 1
primaryGroup 0
localGroup 0
Item-level targeting: Security Group
Attribute Value
bool OR
not 0
name PSP\Networking
sid S-1-5-21-342123414-1712461
userContext 1
primaryGroup 0
localGroup 0
I don't understand why the drive I specified is not mapping.
Drive-Mappings.htm
If the GPO is applying, check Event Viewer - Applications. Any Group Policy Drive mapping errors will be recorded here. Common problems include lack of read permissions to the share/folder.
ASKER
Hi Joe
Yes he is getting the Group Policy. Of course I have Powered down and powered up after any changes to test. Event Viewer is a great tip - I don't know why I didn't think of it. I'm currently Googling the error - "The user 'R:' preference item in the 'Drive Mappings {193F24CF-CAF8-4E92-97B9-3 84093E80A3 C}' Group Policy object did not apply because it failed with error code '0x80070035 The network path was not found.' This error was suppressed."
Yes he is getting the Group Policy. Of course I have Powered down and powered up after any changes to test. Event Viewer is a great tip - I don't know why I didn't think of it. I'm currently Googling the error - "The user 'R:' preference item in the 'Drive Mappings {193F24CF-CAF8-4E92-97B9-3
Can that user browse to \\stp60pfls001\outlook\ when logged in?
You can also try to use the FQDN of your server.
You can also try to use the FQDN of your server.
ASKER
yes. I really thought that share/file security was the issue. But its still not mapping. I tried the FQDN and that didn't help.
Under common options, toggle the run in user context option. Gpupdate - logout - back in.
ASKER
Under common options? where would that be?
Sorry - this is where you enter into the item level targeting values screen. Open the drive mapping preference - click the common tab.
ASKER
it is already "toggled". if you mean checked by that - its been check all along. I suppose I should have included that earlier.
Turn it off and try out your GPO.
ASKER
I turned it off, did updated group policy, shutdown and started up. Same error.
"The user 'R:' preference item in the 'Drive Mappings {193F24CF-CAF8-4E92-97B9-3 84093E80A3 C}' Group Policy object did not apply because it failed with error code '0x80070035 The network path was not found.' This error was suppressed."
"The user 'R:' preference item in the 'Drive Mappings {193F24CF-CAF8-4E92-97B9-3
ASKER
Would anyone else like to look at this?
Sorry Matt - I missed your other reply. Enable debug logging for GPP drive mappings and see what errors appear in the log. You can also upload that log here.
http://blogs.technet.com/b/askds/archive/2008/07/18/enabling-group-policy-preferences-debug-logging-using-the-rsat.aspx
http://blogs.technet.com/b/askds/archive/2008/07/18/enabling-group-policy-preferences-debug-logging-using-the-rsat.aspx
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
.
Second, drive mappings only happen on logon. Have you logged out and back in as the user?
Here is a guide I wrote a while back about troubleshooting GPOs that don't apply: http://deployhappiness.com/top-10-ways-to-troubleshoot-group-policy/