martinrees
(martinrees)
1
Hi
i have created a GPO to map a drive. I have added a security group to this policy and added myself into this group. when i run modelling the GPO applies as expected however the drive does not map.
strange thing is if i add the authenticated users group to the policy it works without issue. i have tried update /force and the usual things and as far as i can see the policy applies but the drive doesn’t map. but again if i add authenticated users it does without issue.
GPresult on machine also confirms policy being applied.
what am i missing?
7 Spice ups
MS released a patch in June last year (I think it was June) to harden the handling of GPO’s.
Basically, if you don’t gice authenticated users or Domain computers read access to the GPO, it will not apply.
Read here: https://blogs.technet.microsoft.com/askpfeplat/2016/07/05/who-broke-my-user-gpos/
4 Spice ups
dbeato
(dbeato)
3
Do not remove the authenticated users from any GPOs as it will not work. Filter the GPOs mapped drive by user preferences and groups, device or per user and many other options you have.
1 Spice up
martinrees
(martinrees)
4
Thanks for the replies but i’m not sure why this is when i have other GPO’s that apply fine without authenticated users also when i add this in it apply the mapping to all users but i am trying to limit the mapping to a selected group. Also when i modify an existing one which does not have authenticated users in it it works as expected its only when i create a new one specifically for mapping a drive that i have this issue.
martinrees
(martinrees)
5
just realised that i also need to add the domain computers instead of authenticated users. Thanks @wannes as your post pointed me in the right direction. this is now working as it should thanks for your help.