Check rights before mapping networks drives..

[PreviousPoster]

Hi
My problem is that network drives that are mapped up in an logon script controlled by GPO does not run while on VPN connection.

So my idea is that i have an logon script that only maps up the drives that the users have permission to access.

I use Sonicwall global vpn client and it runs the users logon script from ad after it connects and it works great, but i can't have all the drives in that script.

can someone help me with this?

[OTHMAN]

Hi
My problem is that network drives that are mapped up in an logon script controlled by GPO does not run while on VPN connection.

So my idea is that i have an logon script that only maps up the drives that the users have permission to access.

I use Sonicwall global vpn client and it runs the users logon script from ad after it connects and it works great, but i can't have all the drives in that script.

can someone help me with this?

Can you post a sample of your script?

[PreviousPoster]

@echo off

net use L: \\hercules\logo /persistent:no

I use the same login script in "User profile - Logon script" in users properties in AD. Here it works well both with vpn and login on locally.

But now I have started to controll the mapping of disk drives with GPO, and that works great login on locally but not when I log on to VPN.

Do you see any solution?

[OTHMAN]

@echo off

net use L: \\hercules\logo /persistent:no

I use the same login script in "User profile - Logon script" in users properties in AD. Here it works well both with vpn and login on locally.

But now I have started to controll the mapping of disk drives with GPO, and that works great login on locally but not when I log on to VPN.

Do you see any solution?

Can you check if the gpo is actually applied to the users:
Steps:
1- Logon using the VPN
2- run - cmd - gpresult /v or gpresult /scope user /v
3- Search for the script(batch file, if it is there)

--
PS. BTW the result will be very long, you can save to a file:
gpresult /v > c:\vnp_gpo.txt

[PreviousPoster]

Not able to check it today, i'll do it tomorrow.

[PreviousPoster]

Download memberof.exe from at http://www.joeware.net/freetools/tools/memberof/index.htm. You may use the following in the logon script to run the command when the user is a member of a specific security group. In the example below, I have assumed your security group is called Hercules

[code:1]memberof.exe -q | find /i "Hercules"
if %ERRORLEVEL%*==0* "net use L: \\hercules\logo /persistent:no" [/code]

[PreviousPoster]

memberof.exe -q | find /i "Hercules"
if %ERRORLEVEL%*==0* "net use L: \\hercules\logo /persistent:no"

That worked great, thnx a lot.