1

Hello Everyone!

I just took a new job and one of my assignments is to create mapped drives for the users and also map the IT folder to the IT users. Simple enough, I created a test user in AD under a test OU folder and assigned it to a TestGroup. In gpedit, created a group policy under the same OU and added the IT share as the mapped drive from the user>preferences configuration. The drive is set to Create and Reconnect. After testing with that user, everything works fine and the mapped drives get connected after login. Now, my user account is in the users OU. I added myself to the same TestGroup and when I login, there are no mapped drives. Hmmm, I have created a 2nd test user which I copied from my account. After testing with it, the drives didn’t get mapped. I moved the test user 2 to the test OU and the drives got mapped. Moved it back to the users OU and the drives won’t reconnect. I have read in several forums and discussions that you only need to make sure the user is in a group that is added to the group policy. I confirmed that it is under the secuity filtering field and also a common item-level targeting in the preference. I have done gpupdate /force, uncheck reconnect, changed to update, recreate, and played with the preference settings without luck. I have added the test group to the same groups my account is member of, and nothing, no change. I can see the mapped drives from the test OU but not from the Users OU. Do I need to creat the GPO globally under the domain? Is there anything else that I could be missing? What’s your suggestion?

Thanks a lot in advance!

8 Spice ups
2

GPO is APPLIED to the OU, but filtered by the group you created, not the inverse what you’ve suggested. I would suggest you create it in the OU that is needed and leave authenticated users as the filtering or create the GPO at domain level and filter it with the group you created.

You can check the GPO is applied for a user by running gpresult /r in CMD.

2 Spice ups
3

Like kmac said, GPO’s are applied to OU’s

I do disagree with him slightly, I would use Item Level targeting if you do need to filter it. Leave Authenticated Users in the filtering (It has to have read access anyway due to a recent update)

5 Spice ups
4

Agree with @Davidr4 and make sure the Item Level Targeting is for the Security Group for that mapped drive. Then you can link the GPO on various OUs and allow you to keep the users in different OUs in AD.

1 Spice up
5

Thank you for the responses, I will try this tomorrow and follow up with you. Thanks again!

6

Thank you, I have linked the GPO to the domain, added the security groups to the level targeting and left the filter for authenticated users while leaving the users in different OUs. It worked, so thank you again! I now understand GPOs better and hopefully someone else will read this post and will have a faster solution.

Thank you to all of you :slight_smile:

1 Spice up