Solved

GPO not working to map a drive

Posted on 2016-09-28
4
41 Views
Last Modified: 2016-10-21
The past few changes to GPO I have made haven't seemed to work and both were supposed to log a drive if the user was part of a certain security group.

I created a new GPO and linked to the domain.local, I set the security filtering for domain\groupname  The only thing in this GPO is to map a drive to \\server\share.  I have it set to reconnect, and replace.

gpresult /R on user machine shows her in the right domain\groupname but under the applied policies it only shows the default domain policy and another policy - not the new GPO I created.

This is win7 and a an 08r2 DC
0
Comment
Question by:rhwimmers
  • 2
4 Comments
 
LVL 40

Expert Comment

by:Adam Brown
ID: 41820699
You may need to run GPUpdate /force to get the policy to apply properly. It also depends on which section of the GPO editor you used to create the settings. Did you use the Computer Settings or User settings section?
0
 
LVL 1

Author Comment

by:rhwimmers
ID: 41822833
Yes I ran /force multiple times and still no luck.  Its a user setting (on the bottom section).
0
 
LVL 30

Accepted Solution

by:
Rich Weissler earned 500 total points (awarded by participants)
ID: 41825644
Check to make certain the computer account for the machines this policy will impact have at least READ permission to the policy.  Assuming your systems were patched... there was a patch released this summer which alters security filtering of GPOs in a very significant way.  (At least relative to this use case.)
0
 
LVL 30

Expert Comment

by:Rich Weissler
ID: 41853466
While not confirmed that this change in the way permissions are checked for group policies, it is likely to be the culprit -- and this same answer will help others.
0

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article runs through the process of deploying a single EXE application selectively to a group of user.
This article outlines the process to identify and resolve account lockout in an Active Directory environment.
This Micro Tutorial will teach you the basics of configuring your computer to improve its speed. It will also teach you how to disable programs that are running in the background simultaneously. This will be demonstrated using Windows 7 operating…
This Micro Tutorial will give you a basic overview of Windows Live Photo Gallery and show you various editing filters and touches to photos you can apply. This will be demonstrated using Windows Live Photo Gallery on Windows 7 operating system.

756 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question