Which kind of login script is best to use on a 2008 / 2012 server?

I just want to simply add client shares with specific drive letters and to deploy shared printers,

I am using GPO on a user container right now. I just don't understand why it does work on user A and not on user B. They are in the same OU and have the same rights.

User A gets mappings, user B not.

Are User A and B logging on to the same exact machine?

No, different machines, both connected to the domain.

On the machine that isn't working, run a gpupdate /force

It may just be that it hasn't updated its group policy yet. They update on random intervals.

That works Joshua, thankx.

One more thing: now I create mappings and printers with GPO using the option: CREATE

So everytime it will create those. Is that how it is meant, or do I need to use UPDATE after the first CREATE.

I would just use update, no need for create

Ok, but how do I then know that new users are getting the mappings from scratch? Since there is no default create policy.

Here's a link to another post explaining the differences.

https://www.experts-exchange.com/questions/28534721/Windows-Group-Policy-Preferences-Create-vs-Update-vs-Replace.html

I usually create groups that match share names, and create a GPO to create a matching mapping.

So, you might have \\server\sales, \\server\management, \\server\repairs, \\server\east and \\server\west.

Now create groups sales, management, repairs, east and west. Apply security at the file level, then create 5 GPOS mapping a letter to each share.

That way, when you add a user to a group, they get the drive letter mapped and access to the files in one operation.  Makes it really easy to set up new users, and determine who end up with access to what.

Great: I removed all scripts and used GPO.

Works great.

Thank you all, I used it before, somehow forgot about it.

Glad to help!