1

I’m testing a drive mapping from GPO on Server 2008 environment. I create a mapped drive with following options,

Action: Update (I’m not sure when create the mapping first I might selected “Create”)

Location: \Servername\shared folder

Reconnect : Checked

Label as: some useful name

Drive Letter: Use: I

Connect as: I did not write any credentials

Hide/Show this drive: Show this drive (Selected) I also tried “No change”

Hide/Show all drives: Show all drives (Selected) I also tried “No change”

on the common tab

I have “Item-level targeting” checked and targeted to Security group.

I also checked “Remove this item when it is no longer applied” which turn Action to Replace

I gave security permission to the groups for shared folders and I added the users in different groups. All the drives mapped correctly, but when I delete the user from security group mapped drive did not get removed. I try “gpupdate /force” on the server and client machine also I restart the client machine. Do I missing some steps? Does anyone have or had same problem?

5 Spice ups
2

If the drive already exists I would think update is fine, if it does not exist then create might be used instead.

You would need to create a new map to delete and then set the targeting to something like the user is not a member of the security group. Then log off and back or do a gpupdate /force

3

Try to manually remove the drive, change the policy to Reconnect:unchecked, apply the gpo and relogin. I suspect that the reconnect option conflicts with the ‘remove this item when it no longer applies’. Not sure, but it is worth a try.

4

Well these are great suggestion but again this is a test box. I can also right click on the drive and select disconnect but what about on production? I will have 40 people in a group and if I need to delete one person from the group (Person might change position or promoted) and doesn’t need to access the mapped drive anymore? Do I have to do this every time?

5

If the policy exists to delete the mapped drive if the user is not a member of security group then it should take care of that for you as you edit group membership.

6

So I have to crete 2 mapping for each drive. One for create another one for delete. Good to know. thanks.

7

That is correct just copy and paste the existing drive map setting you have and update the copy so that the Action is Delete. Then on the common tab > Item Level Targeting change the is a member to is not a member. This should work for you.