Link to home
Start Free TrialLog in
Avatar of hypercube
hypercubeFlag for United States of America

asked on

Drive Map via GPO Not Working

We have a GPO that maps drives through User Preferences.
It works.
That is it's working as long as the shares are located on a Windows Server fileserver.
When we try to add a drive map to a fileshare that's on a workstation,
that one added map isn't showing up on the network Windows 10 Pro computers.
The modified GPO *is*.
I don't find anything that suggests it wouldn't work:
The map is to \\computername\sharename
where computername is a member of a domain OU.
???

(One can successfully manually add the same drive map on a workstation).

Avatar of Andrew Porter
Andrew Porter
Flag of United States of America image

Is the computername resolving correctly when you ping it? I run into problems like this sometimes if there is a mix up in DNS or DHCP on the domain.
Avatar of hypercube

ASKER

Andrew Porter:  Good question.  Yes, it resolves.  Actually, I started with its IP address - as I'm used to being conservative that way (we are using 100% static IP addresses).  But when that didn't work, I went to the computername in view of the OU membership being needed for the GPO??  At least it seemed that it might be an issue so I tried it.
So, there have been two approaches to identifying the "server" workstation.

!! I found that the GPO was "disabled".  I don't know how it got that way nor why it was showing up in gpresult.  So, somewhere in the vast unknown, it was still being applied or had been applied.  I've enabled it.
I note that the GPO contains multiple drive maps and that each one has a  different Security Group entered in the Common / Item-level targeting / Security Group / User in group and Primary group NOT checked.  I've checked all of the maps and they're done the same way with different Security Groups.
I've seen the results of this which is:
If a User is a member of a Security Group for a Share THEN the map is applied.
If not, then the map is not applied.
This has been working with 4 drive maps.
But now the 5th map I've added is the subject of this question.... it's not showing up on ANY workstation while my User Account is a member of every of those Security Groups and is getting all the other drive maps.
When I restart or logon, I can see it being applied.
Hmmm....odd. What does a gpresult /h gpreport.html show for the mapping?
I removed the one drive map that's not working.
I created a new GPO with just this one drive map.
It applies and it doesn't work.
The original for other drive maps (4 of them) still works it appears.



OK.  I ran under a normal command prompt with /h L: where L: is the selected letter for this drive map.
gpresult /h L:
and get
ERROR: Access is denied
I get the same with any non-mapped drive it appears.

Does the GPO you created have the read permissions to the Authenticated Users Group on the workstation?
Andrew Porter:  
Does the GPO you created have the read permissions to the Authenticated Users Group on the workstation?
Yes, it does.


ASKER CERTIFIED SOLUTION
Avatar of hypercube
hypercube
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial