1

I have several dental workstations spread throughout our organization that need a specific drive mapping for the software to function properly. I’m needing to have certain drives mapped when a certain individuals log on to these computers. I’m not having much success with GPO doing this. Here’s the scenario:

We need User1, User2, and User3 to get drives mapped to I: and M: when they log on to Server1 and Workstation1, but only on those computers. There are also a few registry entries I need to push out. So I either need to use Targeting to target a security group with the computers (and loopback or something) or target a security group with users that only applies when logging on to those computers. I have successfully created drive mappings for all my users for our “admin” and “public” shares, but thos are simple GPO’s linked to OU’s. I can’t easily do this for my dental mappings because we have these computers spread across multiple locations and OU’s already. I’m trying to keep my OU structure simple.

2 Spice ups
2

User Config → Preferences → WIndows Settings → Drive Maps

Set Action to update

In the common Tab, go to Item Level targeting.

Add a collection then add these items to the collection: (making sure you use AND)

User, Computer Name, and Site.

Do this for each share.

Registry Edits are below the Drive Maps under Windows Settings.

3 Spice ups
3

Shouldn’t this work if I’m using Security Groups instead of specifically nameing the User or Computer in the GPO? The idea was to be able to drop the computers in a group in Active Directory instead of having to manage the GPO when we add new dental workstations.

4

You can use security groups, but if there is only a few users you can just as easily list them.

If the users change then use security groups.

In fact I use Security Groups where I am.

5

You can do it as mentioned by Paul just substitute the users for the group and when you created the policy and do the targeting make sure you have the collections set to and/is not or so it would look like similar to below.

The user is a member of security group domain\abc

AND this collection is true

Now you can either do the computer name is server1

Or this collection is true

the computer name is workstation1

You could also accomplish by putting these systems into a dedicated OU and setting it to look at that container.

6

Thanks guys. Turns out my issue was actually a missing letter in my share path. Everything is working now. I targeted a security group and placed my dental computers in the group. I think linked my GPO to the proper OU’s.