none
Mapping Networkdrive using GPO and Item-Level Targeting - Same Letter in two groups

    Question

  • Hi.

    I'm using one GPO to Map networkdrives, we are using it with Item-Level Targeting which targets on Security Group, so a Member of "SecurityGroup" gets the Drive, we have several drives and we are using all the Letters that are available, now I'm in a pickle and need help with If a User is part of two Security Groups that uses the same letter to map the drive, Example: User1 is a part of two security groups "Drive-Sales" and "Drive-Account" these two Security Groups uses the same Letter in the GPO to map the drive, so if the User is in both Groups he only gets the "Sales Drive" but not "Account Drive".

    So what I need is that can the GPO assign next Available letter on the computer that "user1" is logged on, and can it be signed on the "Account Drive". ?

    Hope you understand what I'm going for

    Kind Regards

    Haflidi Fridthjofsson.

    Friday, March 06, 2015 11:11 AM

Answers

  • > we are using all the Letters that are available
     
    You should eventually switch to DFS Namespaces and Access based
    enumeration - so each user will have the DFS root assigned and can only
    see the subfolders he has access to.
     
    > So what I need is that can the GPO assign next Available letter on the
    > computer that "user1" is logged on, and can it be signed on the "Account
    > Drive". ?
     
    Yes: Create another assigment with an ILT of "user is member of BOTH
    groups" and use "next available" in this assignment.
     

    Martin

    Mal ein GUTES Buch über GPOs lesen?

    NO THEY ARE NOT EVIL, if you know what you are doing: Good or bad GPOs?
    And if IT bothers me - coke bottle design refreshment :))
    Sunday, March 08, 2015 12:02 PM