• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 64
  • Last Modified:

Windows Share Drive issue

We have a Windows share drive that only certain PCS can access the other PCS GET ACCESS Denied even though they are in same AD Group. The AD Group is computer BASED not  User based. Again all PCs get the mapping and a few computers can access the drive but not all of them. The PCs that are getting access denied are generic accounts that autologin. Any Ideas
0
powerztom
Asked:
powerztom
  • 3
  • 2
  • 2
  • +2
6 Solutions
 
heatfan07Commented:
Traditionally, you would want to achieve mapping to the shared drive under the user's context, not the computers.  In my experience, I have seen this accomplished at logon either through a logon script or Group Policy Preferences drive mappings.

I would recommend to you that you move this functionality to be user-based.  It should be a pretty straightforward process as long as you have a list of the users who need access to the drive.
0
 
PberSolutions ArchitectCommented:
Access to shared drives is provisioned at the user level, not the computer level.  If you granted the generic account access to the share/ntfs, it should work.
0
 
PberSolutions ArchitectCommented:
Also when you provision access with domain groups, you need have the user logoff/logon to have the group access updated in their token.  I still don't understand how your computer access works, but if you added computers to that group, the computer would need to be rebooted in order for it to obtain that group access on its token.
0
Cloud Class® Course: SQL Server Core 2016

This course will introduce you to SQL Server Core 2016, as well as teach you about SSMS, data tools, installation, server configuration, using Management Studio, and writing and executing queries.

 
heatfan07Commented:
One more thing:  When you stated "generic" accounts, we are assuming that these are domain accounts.  If they are local accounts on the PC, then it makes sense why they wouldn't map b/c the domain knows nothing of those accounts.
0
 
Rob WilliamsCommented:
Also do your "generic accounts" have passwords.  Server 2012 and newer, and Win 8 and newer, will not grant access to accounts with blank passwords.
0
 
Shaun VermaakTechnical Specialist/DeveloperCommented:
Rejoin these computers to the domain ensuring you use that same computer objects
0
 
powerztomAuthor Commented:
Doing it the Computer way is not the way to go. We have two Pcs that we are uninstall Single Sign On(Imprivata). those two Pcs. I wanna thank you all for your suggestions and reward each guy.
0
 
powerztomAuthor Commented:
Doing it the Computer way is not the way to go. We have two Pcs that we are uninstall Single Sign On(Imprivata). those two Pcs. I wanna thank you all for your suggestions and reward each guy.
0
 
powerztomAuthor Commented:
Thanks Guys
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Cloud Class® Course: SQL Server Core 2016

This course will introduce you to SQL Server Core 2016, as well as teach you about SSMS, data tools, installation, server configuration, using Management Studio, and writing and executing queries.

  • 3
  • 2
  • 2
  • +2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now