Marco Shmerykowsky PE
2019-Jan-21 18:21 UTC
[Samba] Samba 4 -> Group Policy Drive Map -> Access Denied
user configuration -> Preferences -> Windows Settings -> Drive Maps Item Level Targeting -> Security Group, Domain Users On 1/21/2019 11:09 AM, Luke Barone via samba wrote:> Where is the policy targeting - the user or the computer? > > > On Mon, Jan 21, 2019 at 7:51 AM Marco Shmerykowsky PE via samba < > samba at lists.samba.org> wrote: > >> I seem to be having trouble getting group policies >> to map a drive. When I drilled down thru the logs >> I get an "Access Denied" message. >> >> I can navigate to the share via the computer browser >> and map a drive the "old fashion way" with any issues. >> Files can be read and written. >> >> The group policy doesn't seem to take. Suggestions? >> >> Thank you. >> >> -- >> To unsubscribe from this list go to the following URL and read the >> instructions: https://lists.samba.org/mailman/options/samba
Luke Barone
2019-Jan-21 18:27 UTC
[Samba] Samba 4 -> Group Policy Drive Map -> Access Denied
OK, remove the Item Level Targeting - that should hit all Domain Users anyways. Can you extract the .XML file that is made from that policy? Go to your SYSVOL\<domain>\Policies\<GUID for Policy>\User\Preferences\Drives, and open up "Drives.xml". Copy and paste the contents of that file into the mailing list. On Mon, Jan 21, 2019 at 10:23 AM Marco Shmerykowsky PE via samba < samba at lists.samba.org> wrote:> user configuration -> Preferences -> Windows Settings -> Drive Maps > > Item Level Targeting -> Security Group, Domain Users > > On 1/21/2019 11:09 AM, Luke Barone via samba wrote: > > Where is the policy targeting - the user or the computer? > > > > > > On Mon, Jan 21, 2019 at 7:51 AM Marco Shmerykowsky PE via samba < > > samba at lists.samba.org> wrote: > > > >> I seem to be having trouble getting group policies > >> to map a drive. When I drilled down thru the logs > >> I get an "Access Denied" message. > >> > >> I can navigate to the share via the computer browser > >> and map a drive the "old fashion way" with any issues. > >> Files can be read and written. > >> > >> The group policy doesn't seem to take. Suggestions? > >> > >> Thank you. > >> > >> -- > >> To unsubscribe from this list go to the following URL and read the > >> instructions: https://lists.samba.org/mailman/options/samba > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba
Marco Shmerykowsky
2019-Jan-21 18:36 UTC
[Samba] Samba 4 -> Group Policy Drive Map -> Access Denied
<?xml version="1.0" encoding="utf-8"?>
<Drives clsid="{8FDDCC1A-0C3C-43cd-A6B4-71A6DF20DA8C}"><Drive
clsid="{935D1B74-9CB8-4e3c-9914-7DD559B7A417}" name="W:"
status="W:"
image="2" changed="2019-01-21 18:36:07"
uid="{6524E6E3-E107-48CC-9973-406E16B5F34D}" userContext="1"
bypassErrors="1"><Properties action="U"
thisDrive="SHOW" allDrives="SHOW"
userName="" path="\\sce251\test-share"
label="SHARE" persistent="1"
useLetter="1" letter="W"/><Filters/></Drive>
</Drives>
On Mon, January 21, 2019 1:27 pm, Luke Barone via samba
wrote:> OK, remove the Item Level Targeting - that should hit all Domain Users
> anyways.
>
> Can you extract the .XML file that is made from that policy? Go to your
> SYSVOL\<domain>\Policies\<GUID for
Policy>\User\Preferences\Drives, and
> open up "Drives.xml". Copy and paste the contents of that file
into the
> mailing list.
>
> On Mon, Jan 21, 2019 at 10:23 AM Marco Shmerykowsky PE via samba <
> samba at lists.samba.org> wrote:
>
>> user configuration -> Preferences -> Windows Settings -> Drive
Maps
>>
>> Item Level Targeting -> Security Group, Domain Users
>>
>> On 1/21/2019 11:09 AM, Luke Barone via samba wrote:
>> > Where is the policy targeting - the user or the computer?
>> >
>> >
>> > On Mon, Jan 21, 2019 at 7:51 AM Marco Shmerykowsky PE via samba
<
>> > samba at lists.samba.org> wrote:
>> >
>> >> I seem to be having trouble getting group policies
>> >> to map a drive. When I drilled down thru the logs
>> >> I get an "Access Denied" message.
>> >>
>> >> I can navigate to the share via the computer browser
>> >> and map a drive the "old fashion way" with any
issues.
>> >> Files can be read and written.
>> >>
>> >> The group policy doesn't seem to take. Suggestions?
>> >>
>> >> Thank you.
>> >>
>> >> --
>> >> To unsubscribe from this list go to the following URL and read
the
>> >> instructions: https://lists.samba.org/mailman/options/samba
>>
>> --
>> To unsubscribe from this list go to the following URL and read the
>> instructions: https://lists.samba.org/mailman/options/samba
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba