Avatar of so_cal
so_calFlag for United States of America

asked on 

GPO to unmap network drives upon logoff and to use UNC paths instead

Pretty much as the title describes. I'd like to have a Group Policy Object to unmap network drives upon logoff and use UNC paths instead. I'm not sure if that if a different topic or this is all one topic. How do I do this?
Windows Server 2012* UNC Shared FoldersActive Directory

Avatar of undefined
Last Comment
Shaun Vermaak
ASKER CERTIFIED SOLUTION
Avatar of Shaun Vermaak
Shaun Vermaak
Flag of Australia image

Blurred text
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
Avatar of so_cal
so_cal
Flag of United States of America image

ASKER

Basically my boss is afraid of viruses from PCs spreading to the mapped drives, since some of the mapped drives go to our datacenter.
Unmapping at logoff will not prevent this. When user is logged off the session is closed anyway
Avatar of so_cal
so_cal
Flag of United States of America image

ASKER

Ok, so basically I can use GPO User Map Drive Preferences? That will work just as well?
Better than using scripts
Avatar of so_cal
so_cal
Flag of United States of America image

ASKER

The problem is when users are logged in during the day. We don't want a crypto locker virus, etc to propagate to our mapped drives during the day when users are logged in.
Think you mean "when users are logged off"
When users are logged off their session is not active and nothing will be able to write to mapped drives
Avatar of so_cal
so_cal
Flag of United States of America image

ASKER

But when their session is active 8:00 AM to 5:00 PM, this is what we are worried about here.
Avatar of Mal Osborne
Mal Osborne
Flag of Australia image

You COULD try a script, with a heap of Net use commands.
ie
Net use S: /delete
net use Q: /delete
net use Y: /delete.

In theory you could go through most of the alphabet, nothing of significance will happen if you try to unmap D: and it is a CDROM on some machines.

Of course, you need to figure out how the drives are being mapped at present and ensure that process has been cancelled.
Just use Group Policy User Drive Mappings with a delete action
Avatar of so_cal
so_cal
Flag of United States of America image

ASKER

Shaun - but I still need a way to get to the external resources, i.e. through UNC paths.
SOLUTION
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
Active Directory
Active Directory

Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.

86K
Questions
--
Followers
--
Top Experts
Get a personalized solution from industry experts
Ask the experts
Read over 600 more reviews

TRUSTED BY

IBM logoIntel logoMicrosoft logoUbisoft logoSAP logo
Qualcomm logoCitrix Systems logoWorkday logoErnst & Young logo
High performer badgeUsers love us badge
LinkedIn logoFacebook logoX logoInstagram logoTikTok logoYouTube logo