Solved

GPO not working to map a drive

Posted on 2016-09-28
4
25 Views
Last Modified: 2016-10-21
The past few changes to GPO I have made haven't seemed to work and both were supposed to log a drive if the user was part of a certain security group.

I created a new GPO and linked to the domain.local, I set the security filtering for domain\groupname  The only thing in this GPO is to map a drive to \\server\share.  I have it set to reconnect, and replace.

gpresult /R on user machine shows her in the right domain\groupname but under the applied policies it only shows the default domain policy and another policy - not the new GPO I created.

This is win7 and a an 08r2 DC
0
Comment
Question by:rhwimmers
  • 2
4 Comments
 
LVL 38

Expert Comment

by:Adam Brown
ID: 41820699
You may need to run GPUpdate /force to get the policy to apply properly. It also depends on which section of the GPO editor you used to create the settings. Did you use the Computer Settings or User settings section?
0
 
LVL 1

Author Comment

by:rhwimmers
ID: 41822833
Yes I ran /force multiple times and still no luck.  Its a user setting (on the bottom section).
0
 
LVL 29

Accepted Solution

by:
Rich Weissler earned 500 total points (awarded by participants)
ID: 41825644
Check to make certain the computer account for the machines this policy will impact have at least READ permission to the policy.  Assuming your systems were patched... there was a patch released this summer which alters security filtering of GPOs in a very significant way.  (At least relative to this use case.)
0
 
LVL 29

Expert Comment

by:Rich Weissler
ID: 41853466
While not confirmed that this change in the way permissions are checked for group policies, it is likely to be the culprit -- and this same answer will help others.
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this article, we will see the basic design consideration while designing a Multi-tenant web application in a simple manner. Though, many frameworks are available in the market to develop a multi - tenant application, but do they provide data, cod…
A quick guide on how to use Group Policy to create a custom power plan and set it active on Windows 7.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…

943 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now