Drive mapping during posture remediation

I am doing ISE (1.1.1) deployment for client. The customer is using AD logon script do do drive map to a nas server. My posture remediation acl is blocking drive mapping unless I use 'permit ip any any' which is a security hole. My acl should be modified to allow the drive mapping during unknown/posture-remediation interval. Could any one suggest if you have faced similar issue.

You need to permit access to your domain controllers during posture remediation and add a delay to your logon script -
http://www.cisco.com/en/US/products/ps6128/products_configuration_example09186a0080a70c18.shtml

Similar Messages

Database Network Drive mapping during MDT Build

Edit: Wow..it looks like most of my question got cut off. I blame the new forums.
I'm getting the below errors during my MDT build process. I think its because of the SQL Share information inside of MDT. Will these errors go away if I remove this? I'll post my CS.ini tomorrow when I'm back at work and don't have to do
it via RDP.
Validating connection to
\\devsqldbmdt.DOMAIN.dev\SQLShareDEV$ ZTIGather 6/27/2013 2:38:49 AM 0 (0x0000)
Unable to connect to share: The network name cannot be found.
( 0x80070043 ) , trying to connect without username. ZTIGather 6/27/2013 2:38:49 AM 0 (0x0000)
The network name cannot be found.
ZTIGather 6/27/2013 2:38:49 AM 0 (0x0000)
Unable to connect to
\\devsqldbmdt.DOMAIN.dev\SQLShareDEV$. Sleeping for 5 seconds. ZTIGather 6/27/2013 2:38:49 AM 0 (0x0000)
Unable to connect to share: The network name cannot be found.
( 0x80070043 ) , trying to connect without username. ZTIGather 6/27/2013 2:38:54 AM 0 (0x0000)
The network name cannot be found.
ZTIGather 6/27/2013 2:38:54 AM 0 (0x0000)
I'm not sure where to proceed from here. Should I remove the SQL Share from my Database Connection string?

Let me elaborate on my original post..since I'm at work now and I can post my CS.ini.
I have two servers based on how we would go to production.
DEVMDT001
DEVSQL508
The MDT server hosts WDS and the Deployment Share. SQL is on the remote server with some of our other infrastructure applications. This is how our SQL team wants to support SQL rather than SQL Express.
How do I need to set up the SQL Share (and do I need to?)
Heres my CS.ini (with some editing done.)
[Settings]
Priority=DefaultGateway, CSettings, CRoles, Locations, LSettings, MMSettings, RSettings, RApps, Init, ByIsVM, Default
Properties=SQLServerName, SQLDatabase, BIOSVersion, SMBIOSBIOSVersion, ProductVersion, ScottServerConfig, SkipScottComputerSettings, SkipDRACSettings, DRACConnection, DRACDHCP, DRACIP, DRACSubnet, DRACGateway, MyCustomProperty
[DefaultGateway]
172.30.23.1=DEV
[DEV]
SQLServerName=devsqldbmdt.DOMAIN.dev
SQLDatabase=MDTDEV
[CSettings]
SQLServer=%SQLServerName%
Database=%SQLDatabase%
Netlib=DBNMPNTWSQLShare=DeploymentShare$
Table=ComputerSettings
Parameters=UUID, AssetTag, SerialNumber, MacAddress
ParameterCondition=OR
[CRoles]
SQLServer=%SQLServerName%
Database=%SQLDatabase%
Netlib=DBNMPNTW
Table=ComputerRoles
Parameters=UUID, AssetTag, SerialNumber, MacAddress
ParameterCondition=OR
[Locations]
SQLServer=%SQLServerName%
Database=%SQLDatabase%
Netlib=DBNMPNTWSQLShare=DeploymentShare$
Table=Locations
Parameters=DefaultGateway
[LSettings]
SQLServer=%SQLServerName%
Database=%SQLDatabase%
Netlib=DBNMPNTWSQLShare=DeploymentShare$
Table=LocationSettings
Parameters=DefaultGateway
[MMSettings]
SQLServer=%SQLServerName%
Database=%SQLDatabase%
Netlib=DBNMPNTWSQLShare=DeploymentShare$
Table=MakeModelSettings
Parameters=Make, Model
[RSettings]
SQLServer=%SQLServerName%
Database=%SQLDatabase%
Netlib=DBNMPNTWSQLShare=DeploymentShare$
Table=RoleSettings
Parameters=Role
[RApps]
SQLServer=%SQLServerName%
Database=%SQLDatabase%
Netlib=DBNMPNTWSQLShare=DeploymentShare$
Table=RoleApplications
Parameters=Role
Order=Sequence

Group Policy error 1112 - Drive Maps

Hi everyone
We are getting hundreds of these alerts from SCOM every day from multiple 2008 R2 terminal servers:
Alert from Operations Manager 2007:
Alert description: The Group Policy Client Side Extension Group Policy Drive Maps was unable to apply one or more settings because the changes must be processed before system startup or user logon. The system will wait for Group Policy processing to finish
completely before the next startup or logon for this user, and this may result in slow startup and boot performance.
Looking on the Server itself in the System log I see these entries for every time a user logs onto the server (via RemoteApp)
Log Name: System
Source: Microsoft-Windows-GroupPolicy
Date: 15/03/2012 2:23:58 p.m.
Event ID: 1112
Task Category: None
Level: Warning
Keywords:
User: HOT\xxxxxx
Computer: HOTAKLRD01.hot.co.nz
Description:
The Group Policy Client Side Extension Group Policy Drive Maps was unable to apply one or more settings because the changes must be processed before system startup or user logon. The system will wait for Group Policy processing to finish completely before the
next startup or logon for this user, and this may result in slow startup and boot performance.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-GroupPolicy" Guid="{AEA1B4FA-97D1-45F2-A64C-4D69FFFD92C9}" />
<EventID>1112</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>1</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2012-03-15T01:23:58.350306600Z" />
<EventRecordID>57243</EventRecordID>
<Correlation ActivityID="{651EFA61-7FA8-4444-9E68-81D0F82DEFE4}" />
<Execution ProcessID="900" ThreadID="22780" />
<Channel>System</Channel>
<Computer>HOTAKLRD01.hot.co.nz</Computer>
<Security UserID="S-1-5-21-1288906317-135625827-1544898942-500" />
</System>
<EventData>
<Data Name="SupportInfo1">1</Data>
<Data Name="SupportInfo2">3961</Data>
<Data Name="ProcessingMode">1</Data>
<Data Name="ProcessingTimeInMilliseconds">4656</Data>
<Data Name="ErrorCode">1274</Data>
<Data Name="ErrorDescription">The group policy framework should call the extension in the synchronous foreground policy refresh. </Data>
<Data Name="DCName">\\HOTAKL31.hot.co.nz</Data>
<Data Name="ExtensionName">Group Policy Drive Maps</Data>
<Data Name="ExtensionId">{5794DAFD-BE60-433f-88A2-1A31939AC01F}</Data>
</EventData>
</Event>
However it each case the user still gets their drive mapping!
I've this only occurs with Drive Map GP Preference -I've even taken a user out of all policies except for a new test drive map policy and they still get this error. I've applied the hotfix that should be the latest version of the GP dll's (KB2622802) but
the error remains. I've tried all options within the GPP for Drive Maps - Update, Replace etc,
Should I just override the OpsMgr alerts? It seems like this is a bug with 2008 server and GP Drive Map Preferences?
Any ideas would be appreciated
Thanks
Rik

> *"Note: For servers, the startup and logon processing always behaves
> as if this policy setting is enabled."*
>
> **
>
> **
>
> **
>
> **
>
> **
>
I must admit that I never used Drive Maps on a Server (-: Maybe this is
a bug in the Drive Maps CSE... If it bothers: Set NoBackgroundPolicy
(REG_DWORD) to 1 in HKLM\Software\Microsoft\Windows
NT\CurrentVersion\WinLogon\GPExtensions\
{5794DAFD-BE60-433f-88A2-1A31939AC01F}. This will prevent the Drive Maps
CSE from being invoked during background GP updates.
sincerely, martin
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
Wenn meine Antwort hilfreich war, freue ich mich über eine Bewertung! If my answer was helpful, I'm glad about a rating!

Active Directory Integration and Drive mapping

We currently have a lab with 20 Mac Pro machines, and an Xserve.. all running 10.5+. We are looking at integrating the existing users, through AD, into the Xserve. We have been able to do simple authentication and drive mapping to the windows share easily enough. However what we would like to be able to do is mount a share from the Xserve for only the Macs for the students that will be in there, while keeping the Home directory from AD intact and still being mounted.
Is that possible or I am going outside of what I am able to do?
Thank you

If I understand what you are asking, then you will need to bind the Xserve to AD, then promote it to an OD master. This will allow you to manage the AD groups without schema modification to AD, basically allowing the storage of Apple MCX attributes. You can then create a group in OD and add the AD group to it. Then, manage the OD group and set login preferences to automount a share. Check the box to allow unique user credentials to be sent. Since you are in a Kerberos/Single sign on environment, you will be able to pull this off very easily.
During the workstation bind, make sure the UNC home path option is select and that you are choosing the correct protocol (SMB or AFP). That will allow the AD defined windows home folder to mount. Then follow the OD MCX stuff above to handle the mount of the share. You might also want to look into augmented records if you need to get management to the user level. I've had no need for this yet so I've not used it. Manage by nest AD group has always been enough because everyone gets the same stuff.
Hope this helps

Erratic drive mapping - Vlan assignment

Hello all,
We are having issues with inconsistent drive mapping after vlan change. The client computers (running Windows 7) first authenticate against our NPS server (using mac authentication bypass), and are then placed in vlan 10. After the users log in, they are
placed into a different vlan based on user's AD group membership. The actual vlan switch works fine, and the users always end up in the right vlan. The drives, however, aren't always there. The user's home drive is mapped via the Home Folder in the users'
properties in AD, and the rest of the drives (staff data, etc.) are mapped via a log on script. Drives mapped via GP are almost always mapped, but drives mapped via AD properties are missing much more often. All of the drives can be manually accessed from
all of the vlans. There are no errors on the NPS side, and the only errors I can see in the event viewer are DHCPNack messages (The IP address lease 10.42.13.xx for the Network Card with network address 0x has been denied by the DHCP server 10.42.10.xx). Does
anyone have any advice or a possible solution? Any info would be much appreciated.
Here's how authentication is set up locally:
Cache user information for subsequent connections to this network
Enabled
Authentication Mode
User authentication
Maximum Authentication Failures
2
Maximum EAPOL-Start Messages Sent
Not setup
Held Period (seconds)
Not setup
Start Period (seconds)
Not setup
Authentication Period (seconds)
Not setup
Single Sign On
Before user logon
Maximum acceptable delay for network connectivity
10
This network uses different VLAN for authentication with machine and user credentials
is enabled
Allow additional dialogs during single sign on is disabled
Fast Reconnect is disabled
Authentication method is PEAP-MSCHAP V2
Thank you,
Nikita

Hi,
When an interface changes VLANs, line protocol goes down for a moment then comes back up again. It is similar to physically disconnecting the interface for a very short time. Your problem might be caused by the interface being down for this short period
of time, because this is when the home drives are being mapped, but I'm not sure.
If the GP mappings are almost always working, why not do everything there and dispense with the home drive mapping?
You can also try setting Computer Configuration ->
Administrative Templates -> System -> Logon -> Always wait for the network at computer startup and logon to
Enabled and see if this helps.
-Greg

Drive Map to DFS Folder Getting Lost

We had a problem yesterday morning with every user (about a dozen) in one of our small branch offices being unable to access a certain network share.
Their T: drive, which is the one they had a problem with, is mapped to this:
\\domain.com\namespace\OfficeShare1
which is a DFS folder that simply points to:
\\2012FileServer\OfficeShare1
That is a Server 2012 R2 server.
This share is only a few weeks old, and has been working fine for them until today. We have other offices that have their own shares on the same server, and mapped to a DFS folder the same way, and those have been working OK (as far as I know).
The PCs are all running Windows 7.
Their S: drive is mapped to
\\2003FileServer\CompanyShare
which is a MS Server 2003 server. They had no problems with accessing this, ever.
Going to Computer > Map network drive, I could see the label for \OfficeShare1 was still attached to T:, but the path was empty. The T: drive appeared in the Computer window, but was showing as disconnected, and double-clicking it would throw an error about
the path being unavailable.
Typing \\domain.com\namespace\OfficeShare1 in the address bar would cause the Computer window to hang before erroring-out. Thus, re-creating the drive map would not work.
After trying that, a user could go to \\domain.com\namespace and that would work fine. From there, they could go to the \OfficeShare1 folder without any errors.
If they then went back into Computer, their T: drive would again be working, without having to re-create the mapping.
Also, even though users couldn't browse directly to \\domain.com\namespace\OfficeShare1,without first browsing \\domain.com\namespace, they could browse directly to \\2012FileServer\OfficeShare1.
I've seen a few other users outside the aforementioned office who had the issue, but this is the first opportunity I've had to get more information on it before the client PC was rebooted. Some of those users who have had this issue, also have an X: drive,
which is mapped to:
\\domain.com\namespace\DeptShare1
But this is a CIFS share. And like the share on the 2003 server, no user has experienced the issue with this share.
It has only happened with the shares on the Server 2012 system. And it has been kinda rare (currently less than 75 users who could potentially experience it).
All drives are mapped via Group Policy. Users do have a script they can run to re-create drive maps.
It's probably some connectivity issue that causes the drive to get disconnected (wifi signal drops, VPN gets disconnected, etc). But I'm not sure why the problem persists after connectivity is restored, why the path disappears from the mapping, and why only
with this one drive. The servers hosting those shares are all in the same subnet, same data center.
I'm about to migrate about a share accessed by 500 users to this 2012 system, and I can't until I get this figured out. My hunch is that something in the Windows 7 client PC is getting... lost. It's only happening to drives that map to DFS folders in that namespace
that point to shares on that 2012 server (no one has a drive that maps directly to the shares on that server). The share itself doesn't appear to actually go offline or anything like that. And this morning is the first time I've seen it happen to multiple
people at once.
Weird.
Any help is appreciated.
Thanks!

Hi,
Is there any error message in the Event Log? Do you add more than one namespace server in the DFS namespace? Since the server hangs when you access the DFS link, you could refer to the article below to establish connectivity with the target computer and shared
folder.
Troubleshooting Dfs Problems
http://technet.microsoft.com/en-us/library/cc962144.aspx
Best Regards,
Mandy
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

How can I change the BlackBerry Link Network Drive mapping from Z: to something else?

Hello,
I generally have a mapping to my NFS server on Z:, and my iTunes library has a relative path to Z: for all of my music - the fact that Link is automatically picking Z: as my network sync target for my device does not work for me to sync music, or anything really. I can't figure out how to change this value to something else.
I found the registry key: \HKEY_CURRENT_USER\Software\Research In Motion\Device Manager\Device Settings\<DEVICENAME>\VolumeMapping with a default blank REG_SZ - can I use this key at all to manually change drive mappings for my device? If so, what is the key/value pair I need and will this mess up any assumptions taken inside the Link software for synching?
... Also, I have a Feature Enhancement Request to go along with this issue: Add a "Change drive map letter" button beside the "Turn on wireless connections to my computer" button in Link, and add the same option in the context menu to the 'Device Manager' for the mapping (which currently just says 'Explore').
Thanks for the help,
- Jeff

I do not know a lot about this subject but since Device Manager is not a Device and the BlackBerry Phone is not recognized as a Device in Disk management unless Mass Storage is turned ON it looks as if by design you cannot change the Drive Letter.
Also if Mass Storage is turned On in the Phone Settings File Manager and BB link will not work but the BB Phone will then be recognized as a Device in Disk Management and the Drive Letter can be changed, this has no effect on the Drive Letters for Device Manager.
Normally to change the Drive Letter and Paths of a Device once the Device is plugged you would go to Administrative Tools, Computer Management, Disk Management, right click the Device and choose "Change Drive Letter and Paths"
Changing the Registry or Uninstalling Device Manager but keeping BB Link or looking for a Utility that can change the Drive Letter such as the one that many XP users had called TweakUI (only worked in XP) or changing the Drive Letter for your Network may be the only way.

Key mapping during the transportation (lookup tables)

Hello,
For look up tables with key mapping during the transportation from DEV-> QA -> Prod it is asked to copy development repository with "out master data" How can we do it? and also how are workflows and matching stragetits transported ?
Thanks

Hi
For look up tables with key mapping during the transportation from DEV-> QA -> Prod it is asked to copy development repository with "out master data" How can we do it? and also how are workflows and matching stragetits transported ?
When we are moving from dev to QA to prod normally the remote system to which MDM is interacting also moves to similar environments. In different environments the reference table data may not match and hence it is advised not to move with same data. You can do this by simply exporting the schema of the repository from dev to QA and so on. That is create a new repository in QA and Prod by using option of "Export from Schema".
Matching strategies and workflows are not supported in this schema transport for MDM 5.5
These has to be created manually once the repository has been created.
Good news is MDM 7.1 supports this.
regards
Ravi

Creating a new folder and drive map with Preferences

So I am trying to set things up using GPP so that users of a particular security group get a U:\ drive at the following location:
\\server\share\%username%
I have set up the drive map preference & also a folders preference (to create the user's folder). The problem is that it works BACKWARDS and the drive tries to map prior to folder creation and thus fails, THEN the folder gets created. So
that the 2nd time the user logs in they actually get the U:\ drive at the correct location. The goal is to have the folder created and mapped to on the 1st try for the user.
How can I get this working WITHOUT resorting to scripts, folder redirection, or manually setting the U drive on the AD Profile? I just want that folder to be created for only users in the proper security group, and then have the drive map
to it.
# When I wrote this script only God and I knew what I was doing. # Now, only God Knows!

> How can I get this working WITHOUT resorting to scripts, folder
> redirection, or manually setting the U drive on the AD Profile? I just
> want that folder to be created for only users in the proper security
> group, and then have the drive map to it.
You cannot. The execution order of GPO parts (called Client Side
Extensions) cannot be changed, so you're stuck with this error if you
don't resort to a script :)
Greetings/Grüße,
Martin
Mal ein
gutes Buch über GPOs lesen?
Good or bad GPOs? - my blog…
And if IT bothers me -
coke bottle design refreshment (-:

Drives mapped via GPO, NET USE shows mapping but doesn't show up in Explorer - Win 8.1

Fresh install of Windows Enterprise 8.1
Connected PC to domain, logged in, drive mapping worked as it should.
Rebooted a few times after installing software that I normally install on my computers (from the same sources/locally from my file server, etc). Rebooted a few more times all is well.
A few reboots later, the only drive that is mapped is X: which is my user drive done via the user profile in AD. The rest of the mappings that normally show up done by the GPO no longer show up.
After some digging, and noticing no errors in any logs I ran NET USE in a CMD prompt window, low and behold the drives are actually mapped and I can access them via the CLI without issue. I can navigate via their mapped drive letters, etc.
They just don't show up in Windows Explorer at all and I cannot navigate to the drive letters via the address bar. Strangely enough, it still kinda works since the Downloads start menu item is mapped to a network drive and that still works (Q:\) and
Chrome can access it as well if I try to download something.
I'm really not sure what else to check/try here.
Have other Windows 7 and Windows 8.1 machines (my laptop) and all works just fine, so it's only this specific install on my desktop that is showing this issue.

Hi,
There are several reasons causing the issue:
First, The problematic client doesn't reconnect to the target share at logon.
Please follow the steps to re-configure the mapped driver on the client and then check if the issue will re-occur.
Steps:
a. Open "My Computer"
b. Click on "Tools" and then select "Map Network Driver"
c. input the \\ipaddressofserver\sharename to give the path of the share
d. Check "Reconnect at logon"
e. Drive gets mapped
f. Double click on the drive to check.
Second, Antivirus software or Windows Firewall may block the mapped share.
If there is any Antivirus software and the Windows Firewall is enabled on the problematic client. If so, please disable them to check if the issue can be resolved.
Third, Fast Logon Optimization is enabled on the clients.
The fast logon feature may affect the display and drive letter assignment of a mapped network drive. As a result, the drive may have been mapped; however, the user on client cannot see it in Windows Explorer. He may recognize it as a failed network drive
mapping. This is the reason why we usually suggest you to disable fast logon on the clients via a GPO, and please check if the mapped network drive will be occur under this circumstance.
Please also configure the following group policy setting to disable Fast Logon Optimization to see if the issue still exists on the problematic clients.
Computer Configuration\Administrative Templates\System\Logon\Always wait for the network at computer startup and logon
If we cannot get this issue fixed, please post back the event log related to this issue.
Kate Li
TechNet Community Support

ISE Posture Remediation issue with AV client installation

Problem: If user start AV client installation in pc via AV link remediation after some time (while AV client installation not completed yet) trend micro Update windows gets pop up but not start automatic AV or AS def remediation and Cisco NAC agent shows the message AV definition is not up to date.
Also some time NAC agent give message automatic remediation failed or required user intervention to press ok so NAC can complete remediation process.
I am facing this issues when users don’t have Antivirus client in pc and performing client installation.
We have the following posture policies,
1      AV installation check: if AV is not installed in PC then perform link remediation and let user to download the Antivirus client from provided link.
2      AV definition & AS definition version check (both remediation requirement I putted in one policy): if AV or AS definition version found old then perform automatic remediation.
3.     WSUS check
4      SP   check
Actually I want, first user install AV client via link remediation once installation complete then move to AV & AS def remediation if required (because in first time AV client installation it automatically download all update from the AV server) otherwise def remediate policy wait for AV client installation completion.
Please can anybody let me know how remediation work internally ? like if "AV inst" remediation start so nac agent wait for it completion and don't start other remediation process e.g AS & AV def?
Second question:what is remediation process sequence ?
Third question: is there anyway we can configure timer in remediation process e.g 5 min for AV inst then 3 min for AV & AS def remediation and then go to other posture remediations ?

Please check the below guide for Posture Configuration:
http://www.cisco.com/en/US/products/ps11640/products_tech_note09186a0080c15540.shtml

Client Drive Mapping (Windows) not working in SGD 4.6

I've upgrade your sgd 4.5 to 4.6. Currently we are using Virtual Desktop Connector 1.0 with VMware.
Now I'm ran into a problem with client drive mapping for Windows. CDM has changed in 4.6 from smb to rdp-protocol. So there ist no need for the Enhancement Module on the client.
CDM works well with Windows Server 2003 R2 Terminal Services, but not with Windows XP SP3. In XP there are not clientdrives in explorer. Opening \\tsclient I can see the clientdrives e.g. +\\tsclient\F (rw)+. But when I try to open the folder I get an error, telling me that I didn't have enough rights to access this share.
This happens with a regular VDI-VM (in domain) and to a fresh standalone VM. Also a direct rdp-connect to the vm from Win XP and Win 7 Remote Desktop Client works (local drives are mapped).
Is there any known problem with sgd 4.6 cdm and win xp?
I didn't find any error in the logfiles, but perhaps I didn't look in the right logs. :-)
Thomas

We've just encountered this issue on a SGD 4.6 & Oracle VDI 3.2.1 deployment (XP Desktops), disappointed because we moved from 4.5 to 4.6 due to the expired Verisign cert therein.
Connecting to a 2008R2 Domain controller is fine, no problem and drives mapped as expected.
Have logged a service request, hopefully I've missed something obvious.

Drive Mapping not showing up in Explorer Drive Listing

Hi, I am having a strange problem.
I have a unc path that I want to map to and everything works fine.
Apart from one user.
When I try to map the drive under the probmatic account, I cant see anything in my drive list.
I can go to Computer and map the location by using the Map Network Drive button. (This works fine and the mapping appears.)
But the mapping doesn't appear if I use Net Use. (It says the command completed successfully but it doesn't show in my drive listing)
I have added the account to the local administrators group and turned off UAC.
It's really strange.
I need it to be able to map using Net Use because I have a batch file with a command in.
Have you come across anything like this?

Hi,
No multiple connection to the share using the same credentials. It's basically saying that I can't connect to the share as more than one instance of the same user.
But it's showing that no sessions exist. It's like it's not cleaning up the connections properly when you close them.
I have found some other articles.
This post sounds similar to what I am describing. It's from the following thread
http://social.technet.microsoft.com/Forums/en-US/4b736ba5-268a-4dcb-a3ee-cc2abff0bb01/issue-with-group-policy-drive-mapping?forum=W8ITProPreRel
Run command "net use" in command line with administrator privilege and see if the drive is mapped.
If you can see the mapped drive in the result of net use but cannot see it in Windows Explorer, the issue may be caused by UAC. Are you the domain adminsitrator?
Similar issues occurred since Windows Vista. See:
http://technet.microsoft.com/en-us/library/cc766208(WS.10).aspx
It said:
UAC may prevent Group Policy logon scripts from appearing to work properly. For example, a domain environment contains a GPO that includes a logon script to map network drives. A nonadministrative user logs on to the domain from a Windows Vista computer.
After Windows Vista loads the desktop, the nonadministrative user starts Windows Explorer. The user sees their mapped drives. Under the same environment, an administrative user logs on to the domain from a Windows Vista computer. After Windows Vista loads
the desktop, the administrative user starts Windows Explorer. The user does not see their mapped drives.
When the administrative user logs on, Windows processes the logon scripts using the elevated token. The script actually works and maps the drive. However, Windows blocks the view of the mapped network drives because the desktop uses the limited token while
the drives were mapped using the elevated token.
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. ”
<input id="1f32e2ec-e0e3-481d-90b8-7fcc52f488fa_attachments" type="hidden" value="" />
Marked as answer by
Arthur Xie<abbr class="affil">Microsoft contingent staff, Moderator</abbr>
Friday, June 29, 2012 9:15 AM
Unmarked as answer by
GraffitiK<abbr class="affil"></abbr>
Wednesday, December 19, 2012 3:58 PM
Thursday, June 07, 2012 6:48 AM
Arthur Xie
Arthur Xie
MSFT CSG
32,950 Points
12
4
2
Recent Achievements
New Gallery Rater
Thread Mover II
Proposed Answerer I
Arthur Xie's threads
View Profile
                                    (MSFT CSG)
32,950 Points

Network drive mapping Issue in WINDOWS 8 Client

HI,<o:p></o:p>
We have 2 Win2k8 R2 Domain controller. & around 100 Windows XP & Windows 7 Client. All the network mapping which was mapped through Group policy
is worked fine.<o:p></o:p>
Recently we have added 5 machines of WINDOWS 8 Client in our Network. We have observed that in none of the Windows 8 client machines, Network drives are not
getting automatically mapped. I checked through Gpresulr/r to confirm that whether the policy get applied or not, All the Windows 8 client machines has GP Applied.<o:p></o:p>
I have run gpupdate & restart the machine, I have slow the network logging of Windows 8 Client,but it couldn't help me.
<o:p>Regards,</o:p>
<o:p>Chetan</o:p>

Hi,
In Group Policy Preferences,is "Reconnect" option ticked? If yes, please un-tick this option and check the result. Meanwhile, please check the below post which is discussing the same problem in Windows 8.
Group Policy Preferences Drive Maps Not Working in Windows 8 RTM When "Reconnect" Option is Active
http://social.technet.microsoft.com/Forums/en-US/winserverGP/thread/64e01325-9b2f-477c-ab51-7b10692b583a
If this post does not help solve the problem, I suggest you ask in Group Policy forum.

Problems with drive mapping

We have changed the server of linux that supports tarantella. We have
installed tarantella on redhat 8 and worked perfectly. I have installed
the tarantella enhancement module for windows and activated in the array
manager the option " let users access client drives " but on having
entered the session of windows not does not appear the local hard disks.
There is something more than I have to do in order that me it works? Thank
you for yours help

Carmelo wrote:
The problem is
18:32:27 : 00007219: javi : Add device failed with ERROR_BAD_NETPATH
You may want to enable WINS per
http://www.tarantella.com/documentation/sgd/ee/3.42/help/en-us/base/standard/am_array.html
-> Client Drive Mapping: Use WINS for better performance
Regards,
Javi wrote:
Carmelo,
I have verified that is running cdm, besides I have verified also that
from the windows servers solves perfectly the name of the redhat server.
I write you the mistakes that me appear in the log of the ttadm, for if
you know which is the mistake. Thank you very much
18:32:21 : 00000453: javi : URI file Drive A for Administrator
18:32:21 : 00000453: javi : Share = \\medea\Drive A for Administrator
18:32:21 : 00000469: javi : Packet >> Packet nLength 5
18:32:21 : 00000469: javi : General options flags 8
18:32:21 : 00000469: javi : Alternative name = V:
18:32:21 : 00000469: javi : Packet >> Packet nLength 3
18:32:21 : 00000469: javi : DEVICE_CLASS_FILESYSTEM
18:32:21 : 00000469: javi : device flags 2
18:32:21 : 00000469: javi : Device info : Dos name = , search = 1,
searchUp = 0
18:32:27 : 00007219: javi : Trying alternate device V:
18:32:27 : 00007219: javi : Failed to add device to V:
18:32:27 : 00007219: javi : Add device failed with ERROR_BAD_NETPATH
18:32:27 : 00007219: javi : failed to add device
18:32:27 : 00007219: javi : WTSVirtualChannelWrite returned 18 bytes
18:32:27 : 00007219: javi : 0x0042a160 01 10 00 00 00 10 00 00 00 01 01
00 00 00 00 00 ................
18:32:27 : 00007235: javi : 0x0042a170 00 00 ..
18:32:27 : 00007235: javi : ServerChannel::isDataAvailable
WTSVirtualChannelRead returned 176 bytes
18:32:27 : 00007235: javi : 0x0042a7a4 00 b0 00 00 00 11 00 00 00 01 00
43 19 00 44 72 ...........C..Dr
18:32:27 : 00007235: javi : 0x0042a7b4 69 76 65 20 43 20 66 6f 72 20 41
64 6d 69 6e 69 ive C for Admini
18:32:27 : 00007250: javi : 0x0042a7c4 73 74 72 61 74 6f 72 09 00 00 00
00 00 00 00 01 strator.........
18:32:27 : 00007266: javi : 0x0042a7d4 5c 00 00 00 25 00 73 6d 62 3a 2f
2f 6d 65 64 65 \...%.smb://mede
18:32:27 : 00007266: javi : 0x0042a7e4 61 2f 44 72 69 76 65 20 43 20 66
6f 72 20 41 64 a/Drive C for Ad
18:32:27 : 00007281: javi : 0x0042a7f4 6d 69 6e 69 73 74 72 61 74 6f 72
00 00 00 00 01 ministrator.....
18:32:27 : 00007281: javi : 0x0042a804 2c 00 00 00 14 00 59 57 52 74 61
57 35 70 63 33 ,.....YWRtaW5pc3
18:32:27 : 00007297: javi : 0x0042a814 51 35 4d 44 41 33 4f 44 45 3d 14
00 55 6b 64 42 Q5MDA3ODE=..UkdB
18:32:27 : 00007297: javi : 0x0042a824 50 54 4a 57 55 44 59 77 4d 43 73
79 57 53 45 3d PTJWUDYwMCsyWSE=
18:32:27 : 00007313: javi : 0x0042a834 14 00 00 00 05 00 00 00 08 00 01
00 56 03 00 00 ............V...
18:32:27 : 00007313: javi : 0x0042a844 00 02 00 00 00 00 00 00 00 00 00
00 00 00 00 00
18:32:27 : 00007328: javi : TTDMServer::process messagecode 0 deviceid 17
Carmelo wrote:
Javier,
What version of Tarantella are you running? The reason I ask, is that
since v3.30 you also need to run
$ tarantella start cdm
Also see
http://www.tarantella.com/documentation/sgd/ee/3.42/help/en-us/base/standard/cdm.html
>>
>>
Regards,
Javier wrote:
We have changed the server of linux that supports tarantella. We have
installed tarantella on redhat 8 and worked perfectly. I have installed
the tarantella enhancement module for windows and activated in the array
manager the option " let users access client drives " but on having
entered the session of windows not does not appear the local hard disks.
There is something more than I have to do in order that me it works? Thank
you for yours help
If you are using WINS the problem appears to be one of WINS name mapping.
Check if the Tarantella server is not on the same subnet as the Windows
Terminal Server that you
are using to run your Windows applications.
You need to add the Tarantella server to each of the Windows Terminal
Servers as a WINS server.
After that you may need to restart the Windows terminal Server.
Hope it helps.
Regards,
Gonzalo

Drive mapping during posture remediation

Similar Messages

Maybe you are looking for