Solved

GPO not working to map a drive

Posted on 2016-09-28
4
44 Views
Last Modified: 2016-10-21
The past few changes to GPO I have made haven't seemed to work and both were supposed to log a drive if the user was part of a certain security group.

I created a new GPO and linked to the domain.local, I set the security filtering for domain\groupname  The only thing in this GPO is to map a drive to \\server\share.  I have it set to reconnect, and replace.

gpresult /R on user machine shows her in the right domain\groupname but under the applied policies it only shows the default domain policy and another policy - not the new GPO I created.

This is win7 and a an 08r2 DC
0
Comment
Question by:rhwimmers
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 
LVL 41

Expert Comment

by:Adam Brown
ID: 41820699
You may need to run GPUpdate /force to get the policy to apply properly. It also depends on which section of the GPO editor you used to create the settings. Did you use the Computer Settings or User settings section?
0
 
LVL 1

Author Comment

by:rhwimmers
ID: 41822833
Yes I ran /force multiple times and still no luck.  Its a user setting (on the bottom section).
0
 
LVL 30

Accepted Solution

by:
Rich Weissler earned 500 total points (awarded by participants)
ID: 41825644
Check to make certain the computer account for the machines this policy will impact have at least READ permission to the policy.  Assuming your systems were patched... there was a patch released this summer which alters security filtering of GPOs in a very significant way.  (At least relative to this use case.)
0
 
LVL 30

Expert Comment

by:Rich Weissler
ID: 41853466
While not confirmed that this change in the way permissions are checked for group policies, it is likely to be the culprit -- and this same answer will help others.
0

Featured Post

Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Auditing domain password hashes is a commonly overlooked but critical requirement to ensuring secure passwords practices are followed. Methods exist to extract hashes directly for a live domain however this article describes a process to extract u…
After seeing many questions for JRNL_WRAP_ERROR for replication failure, I thought it would be useful to write this article.
This Micro Tutorial will give you a basic overview of Windows DVD Burner through its features and interface. This will be demonstrated using Windows 7 operating system.
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

627 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question