Windows Share Drive issue

We have a Windows share drive that only certain PCS can access the other PCS GET ACCESS Denied even though they are in same AD Group. The AD Group is computer BASED not  User based. Again all PCs get the mapping and a few computers can access the drive but not all of them. The PCs that are getting access denied are generic accounts that autologin. Any Ideas
Tom PowersAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

heatfan07Commented:
Traditionally, you would want to achieve mapping to the shared drive under the user's context, not the computers.  In my experience, I have seen this accomplished at logon either through a logon script or Group Policy Preferences drive mappings.

I would recommend to you that you move this functionality to be user-based.  It should be a pretty straightforward process as long as you have a list of the users who need access to the drive.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
PberSolutions ArchitectCommented:
Access to shared drives is provisioned at the user level, not the computer level.  If you granted the generic account access to the share/ntfs, it should work.
0
PberSolutions ArchitectCommented:
Also when you provision access with domain groups, you need have the user logoff/logon to have the group access updated in their token.  I still don't understand how your computer access works, but if you added computers to that group, the computer would need to be rebooted in order for it to obtain that group access on its token.
0
Learn Ruby Fundamentals

This course will introduce you to Ruby, as well as teach you about classes, methods, variables, data structures, loops, enumerable methods, and finishing touches.

heatfan07Commented:
One more thing:  When you stated "generic" accounts, we are assuming that these are domain accounts.  If they are local accounts on the PC, then it makes sense why they wouldn't map b/c the domain knows nothing of those accounts.
0
Rob WilliamsCommented:
Also do your "generic accounts" have passwords.  Server 2012 and newer, and Win 8 and newer, will not grant access to accounts with blank passwords.
0
Shaun VermaakTechnical Specialist IVCommented:
Rejoin these computers to the domain ensuring you use that same computer objects
0
Tom PowersAuthor Commented:
Doing it the Computer way is not the way to go. We have two Pcs that we are uninstall Single Sign On(Imprivata). those two Pcs. I wanna thank you all for your suggestions and reward each guy.
0
Tom PowersAuthor Commented:
Doing it the Computer way is not the way to go. We have two Pcs that we are uninstall Single Sign On(Imprivata). those two Pcs. I wanna thank you all for your suggestions and reward each guy.
0
Tom PowersAuthor Commented:
Thanks Guys
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows OS

From novice to tech pro — start learning today.