Pushing Drive mapping via AD

By fahimdxb ·
Hi all

I have a NAS used as a common storage. I want to push drive mapping to all users within the AD group (not home directory but a common folder). I don't have OU's within my structure yet.

What's the easiest way to do it.
For example: I have maps like:
net use * \\abcfiler\Accounts
net use * \\abcfiler\Marketing

I have User Groups defined as Accounts and Marketing having Full Control over their respective shares and there are over 20 other groups.

The aim is to write a script, of something of this sort:
If member of 'accounts', map "net use * \\abcfiler\Accounts"
If member of 'marktg;, map "net use * \\abcfiler\Marketing"
And, where within my Windows 2003 AD, should I place this?

Pls advise!!

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Answers

Collapse -


by julian.bennett In reply to Pushing Drive mapping via ...

I prefer to use GPO's this would be hard if you've not yet configured your OU's (why not?)...

If you create the "If member..." script as you say, then you'll need to place it in the NETLOGON share, this is located in the SYSVOL directory... the location of this depends on what you specified during the server 2003 installation, but is most commonly (as people usually take the default option) under \windows\system32\sysvol\sysvol\scripts (the scripts folder is shared as NETLOGON)

for me the easiest way is create an OU (Sec Groups, for instance) move your 2 groups into the OU. Create a GPO logon script (under user configuration), add the relevant security group (accounts or marketing) to the security permissions of the relevant GPO, ensure you tick the Apply Group Policy option. Then link the GPO to the Sec Groups OU. In this method it doesn't matter where the script is located, you can put it in the same NETLOGON folder if you wish (you might as well).

I find that once you start with the if member, you end up on a long winding road to really complicated and hard to decipher logon scripts, plus the extra processing can actually have a negative effect on login times!

With the GPO you only process the scripts that you should!

Related Discussions

Related Forums