Link to home
Start Free TrialLog in
Avatar of mattmcg
mattmcg

asked on

GPO Drive mappings not working

I am trying to switch over from login script to GPO - Drive mappings using Item Level Targeting.  I created a global security group for each department. The created a global security group for each drive letter. I then created a GPO for each drive letter that will be mapped. I have tried switching between Create and Update. Doing gpupdate /force after all changes. That has not worked. In Item level targeting I added both Security groups.  For a full view of what I have done please read the attached HTM.  I exported the configuration. Our domain functional level is set to Windows Server 2003.

For the purposes of this request I am concentrating on one GPO.  The GPO is configured as follows:  

Action                        Update
Properties
Letter                                     R
Location                               \\stp60pfls001\outlook\
Reconnect                               Enabled
Label as                               \\stp60pfls001\outlook
Use first available                         Disabled
Hide/Show this drive                         Show
Hide/Show all drives                         Show

Common
Options
Stop processing items on this extension if       No
an error occurs on this item
Run in logged-on user's security            Yes
context (user policy option)
Remove this item when it is no longer applied       No
Apply once and do not reapply                   No
Item-level targeting: Security Group
Attribute                               Value
bool                                     AND
not                                     0
name                                     PSP\R - stp60pfls001_outlook_username
sid                                     S-1-5-21-342123414-1712461194-879972363-5699
userContext                               1
primaryGroup                               0
localGroup                               0
Item-level targeting: Security Group
Attribute                               Value
bool                                     OR
not                                     0
name                                     PSP\Networking
sid                                     S-1-5-21-342123414-1712461194-879972363-5733
userContext                               1
primaryGroup                               0
localGroup                               0

I don't understand why the drive I specified is not mapping.
Drive-Mappings.htm
Avatar of Joseph Moody
Joseph Moody
Flag of United States of America image

First, have you verified that the user is receiving the GPO by doing a gpresult?

Second, drive mappings only happen on logon. Have you logged out and back in as the user?

Here is a guide I wrote a while back about troubleshooting GPOs that don't apply: http://deployhappiness.com/top-10-ways-to-troubleshoot-group-policy/
If the GPO is applying, check Event Viewer - Applications. Any Group Policy Drive mapping errors will be recorded here. Common problems include lack of read permissions to the share/folder.
Avatar of mattmcg
mattmcg

ASKER

Hi Joe

Yes he is getting the Group Policy. Of course I have Powered down and powered up after any changes to test.  Event Viewer is a great tip - I don't know why I didn't think of it. I'm currently Googling the error - "The user 'R:' preference item in the 'Drive Mappings {193F24CF-CAF8-4E92-97B9-384093E80A3C}' Group Policy object did not apply because it failed with error code '0x80070035 The network path was not found.' This error was suppressed."
Can that user browse to  \\stp60pfls001\outlook\  when logged in?

You can also try to use the FQDN of your server.
Avatar of mattmcg

ASKER

yes.  I really thought that share/file security was the issue.  But its still not mapping.  I tried the FQDN and that didn't help.
Under common options, toggle the run in user context option. Gpupdate - logout - back in.
Avatar of mattmcg

ASKER

Under common options? where would that be?
Sorry - this is where you enter into the item level targeting values screen. Open the drive mapping preference - click the common tab.
Avatar of mattmcg

ASKER

it is already "toggled".  if you mean checked by that - its been check all along. I suppose I should have included that earlier.
Turn it off and try out your GPO.
Avatar of mattmcg

ASKER

I turned it off, did updated group policy, shutdown and started up. Same error.  

 "The user 'R:' preference item in the 'Drive Mappings {193F24CF-CAF8-4E92-97B9-384093E80A3C}' Group Policy object did not apply because it failed with error code '0x80070035 The network path was not found.' This error was suppressed."
Avatar of mattmcg

ASKER

Would anyone else like to look at this?
Sorry Matt - I missed your other reply. Enable debug logging for GPP drive mappings and see what errors appear in the log. You can also upload that log here.

http://blogs.technet.com/b/askds/archive/2008/07/18/enabling-group-policy-preferences-debug-logging-using-the-rsat.aspx
ASKER CERTIFIED SOLUTION
Avatar of mattmcg
mattmcg

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of mattmcg

ASKER

.