|
Question : Applying Script to a Security Group
|
|
Hello,
I just wanted to know if it is possible to apply a Script to a security group which contains members from different OUs. The scenario is that lets say there is a Shared Network Drive and you want users to get mapped once they log into the network. The Net Use batch Scripps works like a charm when you apply the GPO directly to the OU with its members. But in my case I want different users in different OUs to get mapped to that shared drive so I created an OU and called it shared drive and also created a security Group within the OU and added the members to it. Than created a GPO on the shared drive OU and applied a batch file under the user configuration/ startup. But it is not working for me even after I enforce the policy. The gprsult /v tells me that the policy is successfully applied but I dont see the mapped drive when I log into the network using a test user.
How can I propagate this? The code in the patch file is as follows:
@echo off
ifmember "Group" if not errorlevel 1 goto quit net use /persistent:no s: \\Network drive\Directory :quit
RICHPROFILE.EXE PHMAIL1 %USERNAME% Phipps-%USERNAME% N D
Thank you so much for your help.
Bobby [email protected]
|
Answer : Applying Script to a Security Group
|
|
Forgive me if this seems to basic. Your in Active Directory Users and Computers right. Then right under that is your domain right. You right click on your domain and click on properties, then click on the Group Policy tab. You've got your policy listed there right, you click on your policy and click on properties. Then click on the security tab. Once you've clicked on the security tab, you see a list of groups, the first one is probably Authenticated Users. Down below is your rights for the groups. The last one is Apply Group Policy. Make sure that is unchecked. Then click on all of the other groups and make sure they don't have it applied except for the security group you've created. If you're security group isn't listed, you can add it.
Now I'm guessing that if you ran this and all of your users got it mapped, they won't loose that mapping until it's disconnected.
|
|
|
|