1

I have mapped drives using a GPO. They work ok except that I want to hide a drive from a user and it wont go away. I am using item level targeting and a security group for the targeted object. I have run gpupdate /force on the client machine numerous times and I have also restarted and shutdown with no luck. Anyone have any ideas?

6 Spice ups
2

You may want to look at Access Based Enumeration.

3

Perhaps the drive was manually mapped at some point?

Try

net use x: /delete

on the workstation, where x is the drive.

2 Spice ups
4

Be careful with mapped drives. Crypto / ransomeware loves them!

5

Please see this as it may solve your problem. If loopback processing is not on I have seen that to cause issues as well as User takes priority over Computer configurations.

6

Preferences once applied stay that way until manually changed, unless you are using the replace option with the Remove this when no longer applied box checked.
You will have to manually delete the drive map for that user.

1 Spice up
7

Most current variants of crypto are perfectly happy following any available UNC path. Removing drive maps only works on older versions.

1 Spice up
8

I second Roberts post, unless you have specified in the GPO to delete the mapped drive, it will stay there. Running a script for that particular user on login to delete will probably be the best way

9

I created the share and mapped it using the GPO. I did check the box Remove this when no longer applied but it was after I initially built and assigned it. It is still showing up and I have removed my security group from the GPO yesterday as well. Super confused as to why its still showing up in my file explorer. I also did multiple gpupdate /force commands yesterday.

10

I don’t think it works retroactively. Did you try net use or just Right Click and Disconnect?

11

Thanks for the info I just disconnected it. I will look at the other workstations to see if it is showing up. Thanks again.