Ya, that's pretty much what I was thinking during this conversation.
However, there are also other drives that are mapped with the same
script, so I'm stuck in the middle, trying to figure out which way to
go.  Do I stay with the old login script for everyone, or do I take the
time to change it all to the ADUC profile tab?  Or, do I just do away
with the personal drive letter all together, since we do have folder
redirection in place for My Documents, going to the exact same place?

 

Joe Heaton

Employment Training Panel

 

From: Ken Schaefer [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, November 26, 2008 3:15 AM
To: NT System Admin Issues
Subject: RE: Group policy question

 

Ah, OK. In that case, create a group. Put the users into the group and
set a Deny on "Apply Group Policy" in the ACL for the GPO

 

Cheers

Ken

 

From: Steve Burkett [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, 26 November 2008 10:03 PM
To: NT System Admin Issues
Subject: RE: Group policy question

 

I think Joe was trying to stop the group policy that runs a login script
from taking effect for these users to test out that there wasn't a
conflict happening.

 

Joe, this seems to be a long standing problem with Windows, and we've
certainly had this problem for several years. Every now and then Windows
will fail to map the users home drive correctly if its been specified on
the profile tab. Our googling efforts showed quite a few others having
the issue from way back in 2003, and it doesn't appear to have been
fixed since then as someone reported that it still does it on 2008
(though with a 2003 domain level) .

 

Check out this thread for starters:
http://forums.techarena.in/windows-xp-support/923771.htm

 

We resorted to using login scripts to map the drive, this seems to be
more consistent. Would be interested to know what you find out, as we
haven't revisited this one in a while. 

 

 

From: Ken Schaefer [mailto:[EMAIL PROTECTED] 
Sent: 26 November 2008 05:57
To: NT System Admin Issues
Subject: RE: Group policy question

 

FWIW, this isn't being done through Group Policy AFAIK - you are setting
a property on the user's AD object, not creating a Group Policy Object
that is downloaded and applied on the user's machine.

 

Cheers

Ken

 

From: Joe Heaton [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, 26 November 2008 4:30 AM
To: NT System Admin Issues
Subject: Group policy question

 

Is it possible to add exclusions to a group policy?  I'm having an issue
with some people getting their personal home drives mapped.  When I
started here, this was done with a login script to a manually created,
shared folder.  I've always believed that if the tool is provided, you
should use it, so I would like these drives mapped through ADUC, using
the Profile tab.  However, when I do this, the user will intermittently
not have their home drive mapped at all.  I haven't changed all users
over to the new way, as I need to unshared their home directory, copy
the current contents to a temp location, delete the current folder and
allow AD to recreate it with the proper rights.  But I have been doing
this for all the new employees.  It just so happens that these new
employees are the ones with the issues, so I would like to exclude them
from the GPO that does the old login script, to see if the problem goes
away.

 

Joe Heaton

 

 

 

 

=== 
STEMCOR CONFIDENTIALITY AND DISCLAIMER NOTICE 
This e-mail is intended only for the addressees named in it. The
contents should not be disclosed to any other person nor copies taken.
Any views or opinions presented are solely those of the sender and do
not necessarily represent those of Stemcor unless otherwise specifically
stated. Stemcor does not accept legal responsibility for the contents of
this message nor responsibility for any change made to it after it was
sent by the original sender. You are advised to carry out a virus check
before opening any attachment as Stemcor does not accept liability for
any damage sustained as a result of any software viruses. You should be
aware that Stemcor reserves the right to read incoming and outgoing
emails. 
===

 

 

 

 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

Reply via email to