Re: Drive map problem SBS 2008 and Vista
- From: "Chris" <cjt_uk@xxxxxxxxxxx>
- Date: Wed, 25 Mar 2009 22:41:59 -0000
I'm waiting for an upgrade to one of our line of business software which currently requires Power User access. (Well, they don't offer any alternative work-around to make it work).
When that is available later this year then I can remove all this Power User access!
"Cliff Galiher" <cgaliher@xxxxxxxxx> wrote in message news:OpvEKkZrJHA.2552@xxxxxxxxxxxxxxxxxxxxxxx
Hmm. Possible. Vista doesn't really have power users anymore so who knows what kind of havoc that is causing. I don't use power users at all...so I'll have to test it.
As an aside, even on XP I strongly recommend moving away from using the power users group. Sometimes it is unavoidable, but in many cases you can use tools such as the application compatibility toolkit...or even just changing folder and registry permissions...to a point where regular user accounts can run an otherwise misbehaving app.
-Cliff
"Chris" <cjt_uk@xxxxxxxxxxx> wrote in message news:efa1NZZrJHA.2368@xxxxxxxxxxxxxxxxxxxxxxx
The strange thing is, I also have my account set up as a normal user, and only use an administrator account where required.
I was having this problem for both administrator login and standard user login!
However, "Domain Users" is added to the "Power Users" group, to ensure compatibility with one of our application software.
Could this Power User setting have caused this issue I wonder for normal user logon?
"Cliff Galiher" <cgaliher@xxxxxxxxx> wrote in message news:OL41VzYrJHA.4980@xxxxxxxxxxxxxxxxxxxxxxx
Glad to hear it worked. I did some research and, for posterity, I thought I'd document what I found (never know who might stumble upon this with a google search)
The problem and procedure are documented in an MS KB article here:
http://support.microsoft.com/kb/937624
As documented, this would only cause problems with accounts that are configured as administrator accounts, which is why I believe you were seeing different behavior than I was. As a general security practice, I run as a standard user and have a separate account for administrative tasks. This means I see the same thing that the other users on my network see and makes troubleshooting easier. But it also means that my account doesn't have two security tokens associated with it and therefore drive mapping occurs as expected instead of as described in the KB article above.
Glad to know this could be an issue though, as I'm sure I'll inevitably run into it on a site someday. I'm a big fan of GP preferences and there are clients of mine that give local admin privileges to their users, so thanks for bringing this to my attention. I wasn't aware of it until now.
-Cliff
"Chris" <cjt_uk@xxxxxxxxxxx> wrote in message news:e4g68zXrJHA.2368@xxxxxxxxxxxxxxxxxxxxxxx
Just to let everyone know, this registry fix worked, all fixed now
"Chris" <cjt_uk@xxxxxxxxxxx> wrote in message news:eU$5HYLrJHA.5912@xxxxxxxxxxxxxxxxxxxxxxx
Thank you for your suggestions, it is appreciated.
I have searched further and found this suggestion -
On Vista, mapped driver doesn't work if you have UAC enabled. To resolve
this problem, configure the EnableLinkedConnections registry value:
1. Click Start, type regedit in the Start Search box, and then press ENTER.
2. Locate and then right-click the following registry subkey:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
3. Point to New, and then click DWORD Value.
4. Type EnableLinkedConnections, and then press ENTER.
5. Right-click EnableLinkedConnections, and then click Modify.
6. In the Value data box, type 1, and then click OK.
7. Exit Registry Editor, and then restart the computer.
Related info:
After you turn on User Account Control in Windows Vista, programs may be
unable to access some network locations
http://support.microsoft.com/default.aspx?scid=kb;EN-US;937624
I will try it tomorrow and see if it works.
It doesn't explain why you have not encountered this issue though if you have SBS 2008 and Vista setups.
"Cliff Galiher" <cgaliher@xxxxxxxxx> wrote in message news:uC8%23zu0qJHA.724@xxxxxxxxxxxxxxxxxxxxxxx
Hmm...dunno what to tell you. At this point I'd need to be onsite so I could do some auditing and troubleshooting.
I *can* (just to reconfirm) tell you that I am using GP Preferences in at least a dozen locations (SBS and non-SBS alike) that have Vista SP1. It does work...
-Cliff
"Chris" <cjt_uk@xxxxxxxxxxx> wrote in message news:em92MSzqJHA.2424@xxxxxxxxxxxxxxxxxxxxxxx
Tried ticking the box to run in user security context. Made no difference.
Removed and re-installed the client side extensions. Again, problem still there.
All the policy preferences and group policy settings work fine, except from the drive mapping (which does work on all XP machines).
"Cliff Galiher" <cgaliher@xxxxxxxxx> wrote in message news:uo7bNUcqJHA.528@xxxxxxxxxxxxxxxxxxxxxxx
It may seem counter-intuitive, but try checking that box then. It will force the drive mapping to literally happen *as* that user in every way. Since UAC is also responsible for elevating privileges (UAC *is* more than just that annoying prompt most people associate it with) then this will take UAC completely out of the picture.
If *that* doesn't work, make sure you have the latest version of the client-side extensions installed. Although you'd usually do this through WSUS, I'd download the package and install manually. Maybe you only approved the one for XP...or maybe a pre-SP1 for Vista. You can get it here:
http://www.microsoft.com/downloads/details.aspx?FamilyId=AB60DC87-884C-46D5-82CD-F3C299DAC7CC&displaylang=en
-Cliff
"Chris" <cjt_uk@xxxxxxxxxxx> wrote in message news:e%23hCiCcqJHA.4288@xxxxxxxxxxxxxxxxxxxxxxx
Hi
Yes the drive can be manually mapped on the Vista machine, have tried as administrator login and standard user login and no problems doing this.
Chris
"Cliff Galiher" <cgaliher@xxxxxxxxx> wrote in message news:%23kYYa8bqJHA.4996@xxxxxxxxxxxxxxxxxxxxxxx
XP inherently handles some security items differently, which is why I'm focusing on the security context. Only a few things trigger Vista's UAC. Can users (or you as a non-admin user) map the drives manually?
-Cliff
"Chris" <cjt_uk@xxxxxxxxxxx> wrote in message news:u1%23z5nbqJHA.3420@xxxxxxxxxxxxxxxxxxxxxxx
Hi
None of the group policy are ticked to run in user's security context.
It works fine on all our XP machines.
If it doesn't cause a problem for other people with Vista, then clearly something is different on my setup. I'm just puzzled what it could be or where to look.
Chris
"Cliff Galiher" <cgaliher@xxxxxxxxx> wrote in message news:%23eAJBaaqJHA.496@xxxxxxxxxxxxxxxxxxxxxxx
Something is wrong.
I've never had to do this and I use preferences *a lot!*
Sounds like you may have another group policy security setting blocking the mapping. If you set the preference to run in the user's security context (it is a check box under preferences) then UNCHECK that box. That will have the preference run under an elevated token and should resolve the issue.
-Cliff
"Chris" <cjt_uk@xxxxxxxxxxx> wrote in message news:ueSXCUaqJHA.1208@xxxxxxxxxxxxxxxxxxxxxxx
I found that the group policy preference drive maps works fine if I disable User Access Control on the Vista machine.
Surely I shouldn't have to do this?
Is this normal or is something wrong? I tried a completely fresh install of Vista to try to rule out anything that was configured due to previous software etc.
Chris
"Cris Hanna [SBS - MVP]" <crisnospamhanna@xxxxxxxxxxxxxxxxxxxxx> wrote in message news:eQEMwaLqJHA.5332@xxxxxxxxxxxxxxxxxxxxxxx
have you run gpupdate /force on server and Vista machines?
--
Cris Hanna [SBS - MVP]
Co-Contributor, Windows Small Business Server 2008 Unleashed
http://www.amazon.com/Windows-Small-Business-Server-Unleashed/dp/0672329573/ref=pd_bbs_sr_1?ie=UTF8&s=books&qid=1217269967&sr=8-1
Owner, CPU Services, Belleville, IL
A Microsoft Registered Partner
------------------------------------
MVPs do not work for Microsoft
Please do not submit questions directly to me.
"Chris" <cjt_uk@xxxxxxxxxxx> wrote in message news:9d61e65d-6363-4ba4-9dec-fa8701878d2f@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hi
I have 2 shared drives mapped using Group Policy Preference. The GP
is applied to the whole domain.
This works fine on all our XP machines.
I have now setup a Vista (SP1) client, installed the windowsupdate for
group policy extension.
Things like printers from group policy are applied fine.
But the drive maps are ignored.
I can create them manually. But they do not appear automatically from
group policy preferences.
I have run out of ideas what could be wrong.
Any suggestions please?
Many thanks
Chris
- References:
- Drive map problem SBS 2008 and Vista
- From: Chris
- Re: Drive map problem SBS 2008 and Vista
- From: Cris Hanna [SBS - MVP]
- Re: Drive map problem SBS 2008 and Vista
- From: Cliff Galiher
- Re: Drive map problem SBS 2008 and Vista
- From: Chris
- Re: Drive map problem SBS 2008 and Vista
- From: Cliff Galiher
- Re: Drive map problem SBS 2008 and Vista
- From: Chris
- Re: Drive map problem SBS 2008 and Vista
- From: Cliff Galiher
- Re: Drive map problem SBS 2008 and Vista
- From: Chris
- Re: Drive map problem SBS 2008 and Vista
- From: Chris
- Re: Drive map problem SBS 2008 and Vista
- From: Cliff Galiher
- Re: Drive map problem SBS 2008 and Vista
- From: Chris
- Re: Drive map problem SBS 2008 and Vista
- From: Cliff Galiher
- Drive map problem SBS 2008 and Vista
- Prev by Date: Re: Is it important to turn off client PC's ?
- Next by Date: Re: SBS 2003 internet problem
- Previous by thread: Re: Drive map problem SBS 2008 and Vista
- Next by thread: Re: Drive map problem SBS 2008 and Vista
- Index(es):
Relevant Pages
|
