none
Server 2012 Drives not mapping correctly

    Question

  • So I have a Server 2012 set up with a few different user groups and each of them has a separate folder than needs to be mapped only for them. For example group A has access to FolderA, B to FolderB and C to FolderC. The Administrator account shouldn't have any mapped drives. What happens though is the Administrator gets all of the maps, displaying only 1 in FileExplorer but all the other ones can be accessed by typing(guessing) a letter in the address bar. Another thing is the users from group C get access to FolderA. Everything is messed up basically. I double, triple, quadruple checked all of the settings and have absolutely no clue what I might be doing wrong.

    Here is the log of the drive mapping, though I doubt that can be of any use:

    https://docs.google.com/document/d/1du18-OS50ZcDbwIwfkk5iTUUOGiMWWdZWsi3eC9eC5Y/edit?usp=sharing

    (too big to post it here)

    Any help is appreciated.

    Sunday, January 25, 2015 2:12 PM

All replies

  • Hi,

    Can you post a picture of what happens. It sounds confusing. You can use the windows snipping tool to take pictures.

    Also, post the settings of the drive mapping gpo.

    Another thing, if users can access different folders, but sholdn't, its about the permissions it self, and not the drive mapping.


    Best Regards,

    Jesper Vindum, Denmark

    Systems Administrator

    Help the forum: Monitor(alert) your threads and vote helpful replies or mark them as answer, if it helps solving your problem.

    Sunday, January 25, 2015 2:50 PM
  • Thanks for the answer. I actually have 3 separate GPO's that do the drive mapping. One for each of the user groups. Now that I think about it, this might be what is causing the weirdness.

    Here are the screenshots of the settings of all of the 3 GPOs:

    1. http://i.imgur.com/aEDfLuf.png

    2. http://i.imgur.com/50EDem5.png

    3. http://i.imgur.com/KIWGuzW.png

    This is what I get on the Administrator account: http://i.imgur.com/nTmve4z.png

    No other user groups get access to that drive map. Only the Administrator account. All of the other groups get access to either the Customer Data drive map or the Employees Data drive map.

    None of the 3 GPOs apply to that user and there aren't any others that do any drive mapping at all so I have no idea what is going on.

    I am not sure what you mean about the permissions, but I am pretty sure I have set them up correctly since when I try to access the shares through the network everyone has the right permissions. Even if I have the drive mapped to the wrong user, he still doesnt have access to that drive despite being able to see it. Either way, I prefer to solve the problems one by one and right now I am trying to see why the users are having the wrong folders mapped to them.

    Sunday, January 25, 2015 3:10 PM
  • Okay,

    How are they linked? And, just to be clear, none of the users has any network drive mapped, they are to browse manually?

    Edit: It look like the administrator gets one them applied


    Best Regards,

    Jesper Vindum, Denmark

    Systems Administrator

    Help the forum: Monitor(alert) your threads and vote helpful replies or mark them as answer, if it helps solving your problem.


    Sunday, January 25, 2015 6:26 PM
  • All of the GPOs are linked to the domain root. The users are supposed to have drives mapped and not just browse manually. But what happens is the wrong drives are mapped. Drives that were meant for another user group. 

    Also I tried combining the 3 GPOs into one, but nothing changed. Absolutely nothing. Another strange thing is whenever I try to make a change to the "Group Policy Results" objects, after a restart they all roll back to their previous state and whatever I had done is gone. This includes creating new ones, deleting, etc. At this point I want to point out that I am using the one and only Administrator account created by the OS during installation.

    Oh yes and one more thing that might be helpful for the troubleshooting. I am using RemoteApps and I have user A and B. Both of these users are members of the same group. If I try to login with user A, I get logged in correctly, but if I try to login with user B, in the TaskManager I see that I have in fact logged in as user A again.

    I am starting to regret going with Server 2012. It is awesome definitely but there are too many bugs. Also yes I have installed all of the updates, both recommended and optional.

    EDIT:

    The GPOs are linked to the Domain which the users are members of and restricted only to the correct groups by using security filtering.


    • Edited by Phoenix172 Monday, January 26, 2015 1:42 AM
    Sunday, January 25, 2015 9:55 PM
  • the GPO's you have created, how are they applied(linked) to the users

    Best Regards,

    Jesper Vindum, Denmark

    Systems Administrator

    Help the forum: Monitor(alert) your threads and vote helpful replies or mark them as answer, if it helps solving your problem.

    Sunday, January 25, 2015 9:58 PM
  • A small update: I just disabled and unlinked the now only GPO(I combined the 3 into 1) that creates drive maps aaaand... the drives map the same way. It is like I did nothing. I am starting to feel sorry for going with Windows Server 2012 instead of 2008 but there is no going back now.

    Tuesday, January 27, 2015 9:28 PM
  • This shouldn't matter - 2008 /2012 its pretty much regardless your google doc is TLTR you would be better off posting gpresults via google drive 
    Tuesday, January 27, 2015 9:53 PM
  • Thanks for the tip. What I meant to say was that 2012 is still very new and there are a lot of bugs and I believe what I am experiencing is one of them. I will upload gpresults shortly.
    Thursday, January 29, 2015 1:58 PM
  • Here are the GPResults:

    https://drive.google.com/folderview?id=0B0uIJyx7Fa2oUWd4cGc2RlJPbjQ&usp=sharing

    I have combined all of the drive map rules in one GPO and I am using Item-Level targeting to determine if each rule should be applied for the current user. Basically there is a rule per group. Also I have added the gpresults for the admin user with the policy enabled and disabled. For some reason one of the rules also apply for it even though it doesn't meat any of the item-level targeting requirements.

    Thursday, January 29, 2015 2:17 PM
  • i can't open any of the googledocs
    Thursday, January 29, 2015 8:13 PM
  • My bad. Didn't realize google drive decided to convert my html files to doc. Here is the new link: https://googledrive.com/host/0B0uIJyx7Fa2oUWd4cGc2RlJPbjQ/
    Thursday, January 29, 2015 11:19 PM