Drive Map via GPO Not Working
We have a GPO that maps drives through User Preferences.
It works.
That is it's working as long as the shares are located on a Windows Server fileserver.
When we try to add a drive map to a fileshare that's on a workstation,
that one added map isn't showing up on the network Windows 10 Pro computers.
The modified GPO *is*.
I don't find anything that suggests it wouldn't work:
The map is to \\computername\sharename
where computername is a member of a domain OU.
???
(One can successfully manually add the same drive map on a workstation).
It works.
That is it's working as long as the shares are located on a Windows Server fileserver.
When we try to add a drive map to a fileshare that's on a workstation,
that one added map isn't showing up on the network Windows 10 Pro computers.
The modified GPO *is*.
I don't find anything that suggests it wouldn't work:
The map is to \\computername\sharename
where computername is a member of a domain OU.
???
(One can successfully manually add the same drive map on a workstation).
Last Comment
Andrew Porter
Is the computername resolving correctly when you ping it? I run into problems like this sometimes if there is a mix up in DNS or DHCP on the domain.
ASKER
Andrew Porter: Good question. Yes, it resolves. Actually, I started with its IP address - as I'm used to being conservative that way (we are using 100% static IP addresses). But when that didn't work, I went to the computername in view of the OU membership being needed for the GPO?? At least it seemed that it might be an issue so I tried it.
So, there have been two approaches to identifying the "server" workstation.
!! I found that the GPO was "disabled". I don't know how it got that way nor why it was showing up in gpresult. So, somewhere in the vast unknown, it was still being applied or had been applied. I've enabled it.
I note that the GPO contains multiple drive maps and that each one has a different Security Group entered in the Common / Item-level targeting / Security Group / User in group and Primary group NOT checked. I've checked all of the maps and they're done the same way with different Security Groups.
I've seen the results of this which is:
If a User is a member of a Security Group for a Share THEN the map is applied.
If not, then the map is not applied.
This has been working with 4 drive maps.
But now the 5th map I've added is the subject of this question.... it's not showing up on ANY workstation while my User Account is a member of every of those Security Groups and is getting all the other drive maps.
When I restart or logon, I can see it being applied.
So, there have been two approaches to identifying the "server" workstation.
!! I found that the GPO was "disabled". I don't know how it got that way nor why it was showing up in gpresult. So, somewhere in the vast unknown, it was still being applied or had been applied. I've enabled it.
I note that the GPO contains multiple drive maps and that each one has a different Security Group entered in the Common / Item-level targeting / Security Group / User in group and Primary group NOT checked. I've checked all of the maps and they're done the same way with different Security Groups.
I've seen the results of this which is:
If a User is a member of a Security Group for a Share THEN the map is applied.
If not, then the map is not applied.
This has been working with 4 drive maps.
But now the 5th map I've added is the subject of this question.... it's not showing up on ANY workstation while my User Account is a member of every of those Security Groups and is getting all the other drive maps.
When I restart or logon, I can see it being applied.
Hmmm....odd. What does a gpresult /h gpreport.html show for the mapping?
ASKER
I removed the one drive map that's not working.
I created a new GPO with just this one drive map.
It applies and it doesn't work.
The original for other drive maps (4 of them) still works it appears.
I created a new GPO with just this one drive map.
It applies and it doesn't work.
The original for other drive maps (4 of them) still works it appears.
ASKER
OK. I ran under a normal command prompt with /h L: where L: is the selected letter for this drive map.
gpresult /h L:
and get
ERROR: Access is denied
I get the same with any non-mapped drive it appears.
gpresult /h L:
and get
ERROR: Access is denied
I get the same with any non-mapped drive it appears.
Does the GPO you created have the read permissions to the Authenticated Users Group on the workstation?
ASKER
Andrew Porter:
Does the GPO you created have the read permissions to the Authenticated Users Group on the workstation?Yes, it does.
ASKER CERTIFIED SOLUTION
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
Active Directory
Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.
86K
Questions
--
Followers
--
Top Experts
Get a personalized solution from industry experts
TRUSTED BY
