Re: Login Script - Drive Mapping
- From: "Herb Martin" <news@xxxxxxxxxxxxxx>
- Date: Wed, 4 Apr 2007 13:12:36 -0500
"Hutch" <Hutch@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:A6120BA1-115A-4D27-83B9-AF905930665B@xxxxxxxxxxxxxxxx
To set the stage, we are running Windows 2003 Active Directory, in native
mode. Currently have 3 domain controllers, 2 in main site, one remote.
We
use Kixtart for our login script.
Everything has been working fine, until some changes were made to
permissions, and script this week. To begin with, the Login Script runs
fine, except when it comes to the T: drive mapping.
We use the T: drive, to indicate what team membership an employee belongs
to, and then map that drive based on group membership (like this - CASE
Ingroup ("Domain Group") USE T: "\\servername\sharename".
Now for most staff, this is working fine. However, I recently renamed
existing groups in Active Directory, and changed their T: drive mappings.
For some staff, their T: drive will not map at all (no errors..just does
not
map). We have confirmed the following:
1) Not a domain controller issue...all three have the same login script,
and
I have tested logging into all 3.
2) Not permissions. Even though the drive won't map, I can manually map,
and the account has the correct permissions.
3) The problem appears to be PC specific. That same user account on their
home PC that doesn't work, will work on another PC.
Then most likely is that some of the PCs aren't authenticating -- likely due
to using the wrong DNS servers.
It also could be DC replication (DCDiag /C should be proven to be clean of
FAIL and WARN messages on every DC.)
The final thing I tried (which worked) was to delete the users profile on
their PC. When they signed in, and the profile was re-created, the T:
drive
mapped properly.
This tells me it is a client issue...However....what???? For our OS, we
are running XP SP2 (it is also not a firewall issue).
I would like to find the exact issue, so I don't have to delete user
profiles and re-create. I am thinking it is a combination of the renamed
Groups in Active Directory, and some sort of caching on the client
machine,
that is profile specific.
That just sounds flaky -- what even gave you the idea to do that?
Unless the reason is that T: is already persistenly mapped to something.
Do you always CLEAR (delete) the T: mapping before remapping it?
(You should).
net use T: /d
Also you if you must you can first copy that profile, and then re-copy it
over
the top once it is recreated.
--
Herb Martin, MCSE, MVP
http://www.LearnQuick.Com
(phone on web site)
.
- Follow-Ups:
- Re: Login Script - Drive Mapping
- From: Hutch
- Re: Login Script - Drive Mapping
- Prev by Date: Re: Forcing Users To Change Passwords
- Next by Date: Re: Managing Local Accounts
- Previous by thread: Re: Forcing Users To Change Passwords
- Next by thread: Re: Login Script - Drive Mapping
- Index(es):
Relevant Pages
|
Loading