| Author | Messages | |
HatimVali
Posts:7
 | | 04/14/2010 6:01 PM |
| Greetings,
I am not sure if it already had been discussed in the past. I tried to search a good one relating to drive map using GPP in AD 2008R2. Unfortunately, I could not find somewhere with some examples. I want to understand how it does work on drive map using GPP.
Give you a brief background on what I try to accomplish this task. I have about 50 individual domain users who would like to map network drive on their computers in several OUs. I know that the map network drive on all computer in a specific OU can be mounted automatically through GPO. The big challenge for me to manage 50 individual domain users in variety of OU not one flat OU.
But I believe that drive maps using GPP under User Configuration can be tied up with either user or security group of item-level targeting. 50 individual domain users will see the mapped drive while rest of individual domain users will not see the mapped drive because it is based on security group or user permission?
Please advise me
-- Hatim A. Vali Data Center Engineer Information Technology Services Gallaudet University (202) 651-5300 (Office) (202) 651-5477 (Fax)
=============================
//Confidentiality Notice: This e-mail message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.//
| | | |
| klas9574
Posts:24
 | | 04/14/2010 6:55 PM |
| What you can do is to setup your policy preference for drive mapping at the domain level, then use the item level targeting functionality to give drive mappings to whomever you wish based on specific criteria that you set such as group membership, username, OU, or many others. http://www.windowsnetworking.com/articles_tutorials/Group-Policy-Preferences -Understanding-Implementing-Item-Level-Targeting.html
Scott Klassen
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Hatim Vali Sent: Wednesday, April 14, 2010 11:43 AM To: xxxxxxxxxxxxxxxx Subject: [gptalk] Drive Map using GPP
Greetings,
I am not sure if it already had been discussed in the past. I tried to search a good one relating to drive map using GPP in AD 2008R2. Unfortunately, I could not find somewhere with some examples. I want to understand how it does work on drive map using GPP.
Give you a brief background on what I try to accomplish this task. I have about 50 individual domain users who would like to map network drive on their computers in several OUs. I know that the map network drive on all computer in a specific OU can be mounted automatically through GPO. The big challenge for me to manage 50 individual domain users in variety of OU not one flat OU.
But I believe that drive maps using GPP under User Configuration can be tied up with either user or security group of item-level targeting. 50 individual domain users will see the mapped drive while rest of individual domain users will not see the mapped drive because it is based on security group or user permission?
Please advise me
-- Hatim A. Vali Data Center Engineer Information Technology Services Gallaudet University (202) 651-5300 (Office) (202) 651-5477 (Fax)
=============================
//Confidentiality Notice: This e-mail message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.//
| | | |
| klas9574
Posts:24
 | | 04/14/2010 7:07 PM |
| BTW, it sounds like each of your user OU's are all top level.
For ease of management and granularity of control, you may want to use child OU's instead. E.G., in my environment I have a top level OU called Employees and under this are OU's for each department. If I want to assign a GPO to all staff, I can link it to the Employees OU or to be more specific, I can link it to one or more of the underlying department OU's.
Scott Klassen
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Scott Klassen Sent: Wednesday, April 14, 2010 12:36 PM To: xxxxxxxxxxxxxxxx Subject: RE: [gptalk] Drive Map using GPP
What you can do is to setup your policy preference for drive mapping at the domain level, then use the item level targeting functionality to give drive mappings to whomever you wish based on specific criteria that you set such as group membership, username, OU, or many others. http://www.windowsnetworking.com/articles_tutorials/Group-Policy-Preferences -Understanding-Implementing-Item-Level-Targeting.html
Scott Klassen
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Hatim Vali Sent: Wednesday, April 14, 2010 11:43 AM To: xxxxxxxxxxxxxxxx Subject: [gptalk] Drive Map using GPP
Greetings,
I am not sure if it already had been discussed in the past. I tried to search a good one relating to drive map using GPP in AD 2008R2. Unfortunately, I could not find somewhere with some examples. I want to understand how it does work on drive map using GPP.
Give you a brief background on what I try to accomplish this task. I have about 50 individual domain users who would like to map network drive on their computers in several OUs. I know that the map network drive on all computer in a specific OU can be mounted automatically through GPO. The big challenge for me to manage 50 individual domain users in variety of OU not one flat OU.
But I believe that drive maps using GPP under User Configuration can be tied up with either user or security group of item-level targeting. 50 individual domain users will see the mapped drive while rest of individual domain users will not see the mapped drive because it is based on security group or user permission?
Please advise me
-- Hatim A. Vali Data Center Engineer Information Technology Services Gallaudet University (202) 651-5300 (Office) (202) 651-5477 (Fax)
=============================
//Confidentiality Notice: This e-mail message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.//
| | | |
| HatimVali
Posts:7
 | | 04/14/2010 8:18 PM |
| Scott,
Thanks for your tips and suggestions.
Yes, we do set up the parent OU's as a top level and child OU's for each department. That is how our OU's tree structure is based on the department on the campus. The computer accounts following to the department are in each child OU's.
As per suggestion, I set up the GPO for drive mapping on the top level OU using the item level targeting functionality based on group membership, username, etc.
Regards,
On Wed, Apr 14, 2010 at 1:48 PM, Scott Klassen <xxxxxxxxxxxxxxxx> wrote:
> BTW, it sounds like each of your user OU’s are all top level. > > > > For ease of management and granularity of control, you may want to use > child OU’s instead. E.G., in my environment I have a top level OU called > Employees and under this are OU’s for each department. If I want to assign > a GPO to all staff, I can link it to the Employees OU or to be more > specific, I can link it to one or more of the underlying department OU’s. > > > > Scott Klassen > > > > *From:* xxxxxxxxxxxxxxxx [mailto: > xxxxxxxxxxxxxxxx] *On Behalf Of *Scott Klassen > *Sent:* Wednesday, April 14, 2010 12:36 PM > > *To:* xxxxxxxxxxxxxxxx > *Subject:* RE: [gptalk] Drive Map using GPP > > > > What you can do is to setup your policy preference for drive mapping at the > domain level, then use the item level targeting functionality to give drive > mappings to whomever you wish based on specific criteria that you set such > as group membership, username, OU, or many others. > http://www.windowsnetworking.com/articles_tutorials/Group-Policy-Preferences-Understanding-Implementing-Item-Level-Targeting.html > > > > Scott Klassen > > > > *From:* xxxxxxxxxxxxxxxx [mailto: > xxxxxxxxxxxxxxxx] *On Behalf Of *Hatim Vali > *Sent:* Wednesday, April 14, 2010 11:43 AM > *To:* xxxxxxxxxxxxxxxx > *Subject:* [gptalk] Drive Map using GPP > > > > Greetings, > > > > I am not sure if it already had been discussed in the past. I tried to > search a good one relating to drive map using GPP in AD 2008R2. > Unfortunately, I could not find somewhere with some examples. I want to > understand how it does work on drive map using GPP. > > > > Give you a brief background on what I try to accomplish this task. I have > about 50 individual domain users who would like to map network drive on > their computers in several OUs. I know that the map network drive on all > computer in a specific OU can be mounted automatically through GPO. The big > challenge for me to manage 50 individual domain users in variety of OU not > one flat OU. > > > > But I believe that drive maps using GPP under User Configuration can be > tied up with either user or security group of item-level targeting. 50 > individual domain users will see the mapped drive while rest of individual > domain users will not see the mapped drive because it is based on security > group or user permission? > > > > Please advise me > > > -- > Hatim A. Vali > Data Center Engineer > Information Technology Services > Gallaudet University > (202) 651-5300 (Office) > (202) 651-5477 (Fax) > > ============================= > > //Confidentiality Notice: This e-mail message, including any attachments, > is for the sole use of the intended recipient(s) and may contain > confidential and privileged information. Any unauthorized review, use, > disclosure or distribution is prohibited. If you are not the intended > recipient, please contact the sender by reply e-mail and destroy all copies > of the original message.// >
-- Hatim A. Vali Data Center Engineer Information Technology Services Gallaudet University (202) 651-5300 (Office) (202) 651-5477 (Fax)
=============================
//Confidentiality Notice: This e-mail message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.//
| | | |
| HatimVali
Posts:7
 | | 04/20/2010 12:19 PM |
| Give you a head up.
The suggestion you advised is solved on my case. It works well.
Sincerely,
On Wed, Apr 14, 2010 at 2:52 PM, Hatim Vali <xxxxxxxxxxxxxxxx>wrote:
> Scott, > > Thanks for your tips and suggestions. > > Yes, we do set up the parent OU's as a top level and child OU's for each > department. That is how our OU's tree structure is based on the department > on the campus. The computer accounts following to the department are in > each child OU's. > > As per suggestion, I set up the GPO for drive mapping on the top level OU > using the item level targeting functionality based on group membership, > username, etc. > > Regards, > > > On Wed, Apr 14, 2010 at 1:48 PM, Scott Klassen <xxxxxxxxxxxxxxxx> wrote: > >> BTW, it sounds like each of your user OU’s are all top level. >> >> >> >> For ease of management and granularity of control, you may want to use >> child OU’s instead. E.G., in my environment I have a top level OU called >> Employees and under this are OU’s for each department. If I want to assign >> a GPO to all staff, I can link it to the Employees OU or to be more >> specific, I can link it to one or more of the underlying department OU’s. >> >> >> >> Scott Klassen >> >> >> >> *From:* xxxxxxxxxxxxxxxx [mailto: >> xxxxxxxxxxxxxxxx] *On Behalf Of *Scott Klassen >> *Sent:* Wednesday, April 14, 2010 12:36 PM >> >> *To:* xxxxxxxxxxxxxxxx >> *Subject:* RE: [gptalk] Drive Map using GPP >> >> >> >> What you can do is to setup your policy preference for drive mapping at >> the domain level, then use the item level targeting functionality to give >> drive mappings to whomever you wish based on specific criteria that you set >> such as group membership, username, OU, or many others. >> http://www.windowsnetworking.com/articles_tutorials/Group-Policy-Preferences-Understanding-Implementing-Item-Level-Targeting.html >> >> >> >> Scott Klassen >> >> >> >> *From:* xxxxxxxxxxxxxxxx [mailto: >> xxxxxxxxxxxxxxxx] *On Behalf Of *Hatim Vali >> *Sent:* Wednesday, April 14, 2010 11:43 AM >> *To:* xxxxxxxxxxxxxxxx >> *Subject:* [gptalk] Drive Map using GPP >> >> >> >> Greetings, >> >> >> >> I am not sure if it already had been discussed in the past. I tried to >> search a good one relating to drive map using GPP in AD 2008R2. >> Unfortunately, I could not find somewhere with some examples. I want to >> understand how it does work on drive map using GPP. >> >> >> >> Give you a brief background on what I try to accomplish this task. I have >> about 50 individual domain users who would like to map network drive on >> their computers in several OUs. I know that the map network drive on all >> computer in a specific OU can be mounted automatically through GPO. The big >> challenge for me to manage 50 individual domain users in variety of OU not >> one flat OU. >> >> >> >> But I believe that drive maps using GPP under User Configuration can be >> tied up with either user or security group of item-level targeting. 50 >> individual domain users will see the mapped drive while rest of individual >> domain users will not see the mapped drive because it is based on security >> group or user permission? >> >> >> >> Please advise me >> >> >> -- >> Hatim A. Vali >> Data Center Engineer >> Information Technology Services >> Gallaudet University >> (202) 651-5300 (Office) >> (202) 651-5477 (Fax) >> >> ============================= >> >> //Confidentiality Notice: This e-mail message, including any attachments, >> is for the sole use of the intended recipient(s) and may contain >> confidential and privileged information. Any unauthorized review, use, >> disclosure or distribution is prohibited. If you are not the intended >> recipient, please contact the sender by reply e-mail and destroy all copies >> of the original message.// >> > > > > -- > Hatim A. Vali > Data Center Engineer > Information Technology Services > Gallaudet University > (202) 651-5300 (Office) > (202) 651-5477 (Fax) > > ============================= > > //Confidentiality Notice: This e-mail message, including any attachments, > is for the sole use of the intended recipient(s) and may contain > confidential and privileged information. Any unauthorized review, use, > disclosure or distribution is prohibited. If you are not the intended > recipient, please contact the sender by reply e-mail and destroy all copies > of the original message.// >
-- Hatim A. Vali Data Center Engineer Information Technology Services Gallaudet University (202) 651-5300 (Office) (202) 651-5477 (Fax)
=============================
//Confidentiality Notice: This e-mail message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.//
| | | |
| klas9574
Posts:24
 | | 04/20/2010 3:13 PM |
| Great to hear.
Group Policy Preferences is incredibly powerful and a must use addition for every admin.
BTW, there's a relatively new Group Policy site out there on the web with tons of useful tips. http://www.grouppolicy.biz/
Scott Klassen
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Hatim Vali Sent: Tuesday, April 20, 2010 6:10 AM To: xxxxxxxxxxxxxxxx Subject: Re: [gptalk] Drive Map using GPP
Give you a head up.
The suggestion you advised is solved on my case. It works well.
Sincerely,
On Wed, Apr 14, 2010 at 2:52 PM, Hatim Vali <xxxxxxxxxxxxxxxx> wrote:
Scott,
Thanks for your tips and suggestions.
Yes, we do set up the parent OU's as a top level and child OU's for each department. That is how our OU's tree structure is based on the department on the campus. The computer accounts following to the department are in each child OU's.
As per suggestion, I set up the GPO for drive mapping on the top level OU using the item level targeting functionality based on group membership, username, etc.
Regards,
On Wed, Apr 14, 2010 at 1:48 PM, Scott Klassen <xxxxxxxxxxxxxxxx> wrote:
BTW, it sounds like each of your user OU's are all top level.
For ease of management and granularity of control, you may want to use child OU's instead. E.G., in my environment I have a top level OU called Employees and under this are OU's for each department. If I want to assign a GPO to all staff, I can link it to the Employees OU or to be more specific, I can link it to one or more of the underlying department OU's.
Scott Klassen
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Scott Klassen Sent: Wednesday, April 14, 2010 12:36 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Drive Map using GPP
What you can do is to setup your policy preference for drive mapping at the domain level, then use the item level targeting functionality to give drive mappings to whomever you wish based on specific criteria that you set such as group membership, username, OU, or many others. http://www.windowsnetworking.com/articles_tutorials/Group-Policy-Preferences -Understanding-Implementing-Item-Level-Targeting.html
Scott Klassen
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Hatim Vali Sent: Wednesday, April 14, 2010 11:43 AM To: xxxxxxxxxxxxxxxx Subject: [gptalk] Drive Map using GPP
Greetings,
I am not sure if it already had been discussed in the past. I tried to search a good one relating to drive map using GPP in AD 2008R2. Unfortunately, I could not find somewhere with some examples. I want to understand how it does work on drive map using GPP.
Give you a brief background on what I try to accomplish this task. I have about 50 individual domain users who would like to map network drive on their computers in several OUs. I know that the map network drive on all computer in a specific OU can be mounted automatically through GPO. The big challenge for me to manage 50 individual domain users in variety of OU not one flat OU.
But I believe that drive maps using GPP under User Configuration can be tied up with either user or security group of item-level targeting. 50 individual domain users will see the mapped drive while rest of individual domain users will not see the mapped drive because it is based on security group or user permission?
Please advise me
-- Hatim A. Vali Data Center Engineer Information Technology Services Gallaudet University (202) 651-5300 (Office) (202) 651-5477 (Fax)
=============================
//Confidentiality Notice: This e-mail message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.//
-- Hatim A. Vali Data Center Engineer Information Technology Services Gallaudet University (202) 651-5300 (Office) (202) 651-5477 (Fax)
=============================
//Confidentiality Notice: This e-mail message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.//
-- Hatim A. Vali Data Center Engineer Information Technology Services Gallaudet University (202) 651-5300 (Office) (202) 651-5477 (Fax)
=============================
//Confidentiality Notice: This e-mail message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.//
| | | |
| jsclmedave
Posts:67
 | | 04/20/2010 3:25 PM |
| Thank you for the link Scott!!
Tim Bolton 148 2nd Street North Central City Iowa, 52214
Microsoft Certified IT Professional
Blog - Http://timbolton.net/
"Applying computer technology is simply finding the right wrench to pound in the correct screw." ~ Steve Riley
On Tue, Apr 20, 2010 at 9:08 AM, Scott Klassen <xxxxxxxxxxxxxxxx> wrote: > Great to hear. > > > > Group Policy Preferences is incredibly powerful and a must use addition for > every admin. > > > > BTW, there’s a relatively new Group Policy site out there on the web with > tons of useful tips. http://www.grouppolicy.biz/ > > > > Scott Klassen > > > > From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] > On Behalf Of Hatim Vali > Sent: Tuesday, April 20, 2010 6:10 AM > > To: xxxxxxxxxxxxxxxx > Subject: Re: [gptalk] Drive Map using GPP > > > > Give you a head up. > > > > The suggestion you advised is solved on my case. It works well. > > > > Sincerely, > > On Wed, Apr 14, 2010 at 2:52 PM, Hatim Vali <xxxxxxxxxxxxxxxx> > wrote: > > Scott, > > > > Thanks for your tips and suggestions. > > > > Yes, we do set up the parent OU's as a top level and child OU's for each > department. That is how our OU's tree structure is based on the department > on the campus. The computer accounts following to the department are in > each child OU's. > > > > As per suggestion, I set up the GPO for drive mapping on the top level OU > using the item level targeting functionality based on group membership, > username, etc. > > > > Regards, > > > > On Wed, Apr 14, 2010 at 1:48 PM, Scott Klassen <xxxxxxxxxxxxxxxx> wrote: > > BTW, it sounds like each of your user OU’s are all top level. > > > > For ease of management and granularity of control, you may want to use child > OU’s instead. E.G., in my environment I have a top level OU called > Employees and under this are OU’s for each department. If I want to assign > a GPO to all staff, I can link it to the Employees OU or to be more > specific, I can link it to one or more of the underlying department OU’s. > > > > Scott Klassen > > > > From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] > On Behalf Of Scott Klassen > Sent: Wednesday, April 14, 2010 12:36 PM > > To: xxxxxxxxxxxxxxxx > > Subject: RE: [gptalk] Drive Map using GPP > > > > What you can do is to setup your policy preference for drive mapping at the > domain level, then use the item level targeting functionality to give drive > mappings to whomever you wish based on specific criteria that you set such > as group membership, username, OU, or many others. > http://www.windowsnetworking.com/articles_tutorials/Group-Policy-Preferences-Understanding-Implementing-Item-Level-Targeting.html > > > > Scott Klassen > > > > From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] > On Behalf Of Hatim Vali > Sent: Wednesday, April 14, 2010 11:43 AM > To: xxxxxxxxxxxxxxxx > Subject: [gptalk] Drive Map using GPP > > > > Greetings, > > > > I am not sure if it already had been discussed in the past. I tried to > search a good one relating to drive map using GPP in AD 2008R2. > Unfortunately, I could not find somewhere with some examples. I want to > understand how it does work on drive map using GPP. > > > > Give you a brief background on what I try to accomplish this task. I have > about 50 individual domain users who would like to map network drive on > their computers in several OUs. I know that the map network drive on all > computer in a specific OU can be mounted automatically through GPO. The big > challenge for me to manage 50 individual domain users in variety of OU not > one flat OU. > > > > But I believe that drive maps using GPP under User Configuration can be tied > up with either user or security group of item-level targeting. 50 > individual domain users will see the mapped drive while rest of individual > domain users will not see the mapped drive because it is based on security > group or user permission? > > > > Please advise me > > -- > Hatim A. Vali > Data Center Engineer > Information Technology Services > Gallaudet University > (202) 651-5300 (Office) > (202) 651-5477 (Fax) > > ============================= > > //Confidentiality Notice: This e-mail message, including any attachments, is > for the sole use of the intended recipient(s) and may contain confidential > and privileged information. Any unauthorized review, use, disclosure or > distribution is prohibited. If you are not the intended recipient, please > contact the sender by reply e-mail and destroy all copies of the original > message.// > > > -- > Hatim A. Vali > Data Center Engineer > Information Technology Services > Gallaudet University > (202) 651-5300 (Office) > (202) 651-5477 (Fax) > > ============================= > > //Confidentiality Notice: This e-mail message, including any attachments, is > for the sole use of the intended recipient(s) and may contain confidential > and privileged information. Any unauthorized review, use, disclosure or > distribution is prohibited. If you are not the intended recipient, please > contact the sender by reply e-mail and destroy all copies of the original > message.// > > > -- > Hatim A. Vali > Data Center Engineer > Information Technology Services > Gallaudet University > (202) 651-5300 (Office) > (202) 651-5477 (Fax) > > ============================= > > //Confidentiality Notice: This e-mail message, including any attachments, is > for the sole use of the intended recipient(s) and may contain confidential > and privileged information. Any unauthorized review, use, disclosure or > distribution is prohibited. If you are not the intended recipient, please > contact the sender by reply e-mail and destroy all copies of the original > message.//
| | Tim Bolton | |
|
|