Phantom Mapped Drives

By XT John ·
We have a PC running Windows XP in a Domain environment, and it has all its updates. This user needs access to 5 folders on the server, and has drive mappings to them using v,w,x,y,and z. What's been happening on this machine is phantom mapped drives are filling up the available spaces in between... g-u, typically they are pointing to the same shared folder, they'll display as being 'disconnected' (and thus unremovable); though the folder is accessible. I had recreated the profile for this user, and things worked fine for several days, now they're back. We are all scratching out heads over this one. The desired mappings v-z are all available and working fine. The user is not having any other issues on this PC, and is used to ignoring the 'disconnected' drives. We're just baffled by this one...

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Answers

Collapse -

Just responding

by XT John In reply to Phantom Mapped Drives

to move the question closer to the top. The issue has spread to 2 additional computers now.

Collapse -

Is there any possibility

by Tig2 In reply to Just responding

That this is viral? When it was just one pc infected, I scratched my head awhile and could think of nothing that might help outside of rebuilding the user profile- which you have done, only to have the problem return.

I'm sure that you have AV and your network is firewalled but virus can get in. Is it possible?

The only other thing I can think would be to check permissions on the folders that are appearing as a-u.

If nothing else, this will get you back up to the top of the churn again. Maybe Mycroft will see it.

Collapse -

Not a virus, Tig. This is a bug in Windows and I've found a fix for it

by ManiacMan In reply to Is there any possibility

This problem stems from the way drives are mapped as it uses the original and cached credentials to authenticate to the mapped drives. If the network drives were mapped when the PC was still in a workgroup, those local credentials were used to map. If the machine is later joined to the domain, guess which credentials are still being used to map to the network drives? Yes, the old local user credentials which are now invalid, yet when the user double clicks on the disconnected drive, it's accessible because NTFS and share permissions are enumerated and realize that the user does have the proper permissions indeed. There is a slight reg hack that needs to done to get rid of the disconnected drives. Here it is:

run regedit and navigate to the following key:


For each disconnected network drive letter, create a new key under Mointpoint2 to be the name of the disconnected drive letter (e.g. G for G: not use the colon in key name)

Under the newly created key, create a new string called BaseClass and give it a value of Drive

Repeat this process for every disconnected network drive letter and then close the registry.

Reboot the PC and proceed to remove the disconnected network drive(s). This reg hack will need to be repeated on every machine with this problem, servers included.

Collapse -

I have never heard of that before!

by Tig2 In reply to Not a virus, Tig. This i ...

Is the reg hack something that can be scripted? I would hate to think the poor guy is potentially looking at having to do that by hand throughout the network. And the registry can be a dicey place to begin with.

But really good information. Thanks!

Remind me if I open a question that I owe you a thumb.

Collapse -

Thanks for the tip

by XT John In reply to I have never heard of tha ...

I'll let you know how it works out. Funny thing is, I found a post concerning the exact same thing on Microsoft's website, and no answer given. As far as these machines belonging to a workgroup; they've been attached to this domain about 2 years. I recall there being a problem with the Domain Controller replacement awhile back; and all the pc's on the LAN needing to be disjoined/rejoined.

Collapse -

This problem seems to plague persistent drive mappings

by ManiacMan In reply to Thanks for the tip

Believe me, I support a small medical office in which I setup their LAN and DC and have been banging my head against the wall for 2 weeks with this problem until I found the solution. I have noticed that if you don't flag the drives to be persistent upon mapping, you don't see this issue. Another headache MS left us poor IT folks to deal with, as if we don't have enough as is.

Collapse -

Well, disjoining and rejoining from DC effectively puts them in a workgroup

by ManiacMan In reply to Thanks for the tip

and since I'm sure they have had persistent drives mapped when joined to the domain, the problem manifested itself as you see it now.

Collapse -

This can be scripted to create the keys, strings, and values

by ManiacMan In reply to I have never heard of tha ...

But the script would have to be modified accordingly based on the network drive letters in question. I just provided the key names and values as an example of what to do, but I see no reason as to why this can't or shouldn't be scripted.

Collapse -

Worked Fine

by XT John In reply to This can be scripted to c ...

Thankfully, I only had to do this on 2 machines here on our LAN. So far, so good... no unwanted drives popping back up! I'm glad this solution will be part of TechRepublic now; heaven knows I couldn't find the solution anywhere on the web, even Microsft's site!

Collapse -

Hey John!

by Tig2 In reply to Worked Fine

Remember to give Maniac another thumb! And thank you for thinking to give him one in the first place! That was some serious digging he did!

Yep- impressed even me.

Related Discussions

Related Forums