GPO and timed mapped drives.

I need to create a group policy that disconnects certain users from mapped drives at a certain time. Can this be done?
cnl83Asked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

MaheshArchitectCommented:
you need to create schedule tasks which will connect / disconnect mapped drives at certain time

schedule tasks can be pushed via GPO preferences

Also GPO should be filtered to apply only specific group (set of users) and this can be done via item level targeting in GP preferences item
0
DonNetwork AdministratorCommented:
You could try using task scheduler and a batch file with

net use /del Z:

or

net use /del *  <<< to delete all
0
Cliff GaliherCommented:
Keep in mind that a mapped drive is exactly that.  It *maps* to an SMB share.  Unmapping a drive won't suddenly block the user from accessing the underlying share.  And removing access to a share on a schedule is not a trivial task due to Kerberos tickets lifetimes.  There isn't a simple good way to do what you want.  Perhaps if you explain the business need you are trying to accomplish, we can suggest better ways.
0
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

cnl83Author Commented:
Two employees are sharing the same computer. The second employee gets on at 2PM and does not need to have access to that drive.
0
Cliff GaliherCommented:
The proper approach is to have two accounts on that computer.  User 1 logs off, user 2 logs on.  Mapped drives are done in the user context so drives mapped for user 1 won't exist in user 2 and vice versa.  And by doing two accounts, you actually get to prevent access at the share level to resources that the other user doesn't need.  Unmapping the drive is not an sufficient security boundary.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Mitul PrajapatiIT SupervisorCommented:
Steps:

 Open Group policy --> right click and edit policy of drive mapping policy --->user configuration -->Preference --> Windows Settings --> Drive Maps --> Right click and select properties of mapped drive --> Common Tab --> Select Targeting --> New Item --> Time Range (Define the time range... )    Done!!!

@Two employees sharing the same computer --> Create new item for both of the employee..
0
Cliff GaliherCommented:
That'll only map the drive between those times. But it won't unmap an existing drive while the user is logged in. And GPs only refresh every 90 minutes so even a forced workaround is not reliable.
1
Mitul PrajapatiIT SupervisorCommented:
You are right Cliff... I totally missed that point..
0
Shaun VermaakTechnical Specialist IVCommented:
You can and additional conditions to #a42485970 and change it to "Remove policy when going out of scope" or you can use PowerShell to enable/disable the link from DC with a scheduled task
0
cnl83Author Commented:
This is one user... so maybe I'll skip the GP and apply a scheduled task with a batch file.
0
cnl83Author Commented:
Cliff, I agree that two profiles would resolve the issue, but they want them on the same account, email etc.
0
Cliff GaliherCommented:
Sometimes. The job of an I. T. Pro is to educate (thus the "pro") and it sounds like you need to educate them. Even if ther on needs or technical limitations or both.

Shared email is easy. Shared resources are easy but if they don't want the mapped drives shared, then they want two accounts....withour realizing it. That's my. 02 cents.
1
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.