Mapping Drives / AD / Terminal Server

[OzDog]

Hey all,

We are upgrading our (Citrix) Terminal Server farm shortly to Windows 2003, and I'm looking to get rid of login scripts (or as close as possible). With our plans for deploying this farm, it will make a big difference for us, so we need to make logging transparent.

I've got everything other than drive mappings out of the scripts thanks to AD, but now I want to get rid of these drive mappings too. Anyone got any ideas? Can AD do it?

Cheers,
Sam

Please let members know if you found their posts helpful.

 

[jockojem]

Sam

If you have someway I can get a file to you. (Email/ftp site??) I can send you an ADM file which can handle this.

Jem

 

[OzDog]

That would be great, thanks Jem. My email address is baddoggie987@hotmail.com.


Cheers,
Sam

Please let members know if you found their posts helpful.

 

[jockojem]

Sam

Sorry for the delay. I decided to post the reply here so others could share - and the file was so long after all.

If you are unfamiliar with adding "NT4" adms which "tatoo" the registry to GPOs then have a look at this link first.

http://www.microsoft.com/technet/tr...wsserver2003/proddocs/entserver/tattooing.asp

The adm below deals only with F:\ but can obviously be repeated to map other drives. Change only the "your" variables. Other settings such as "\\server\share" are meant that way.

Any problems post them back and I will try to help.

All the best Jem

**********************************************************************************

CLASS MACHINE

CLASS USER

CATEGORY !!Network
CATEGORY !!Connections
POLICY !!MapF
KEYNAME "Network\F"
ACTIONLISTON
VALUENAME ConnectionType VALUE NUMERIC 1
VALUENAME ProviderName VALUE "Microsoft Windows Network"
VALUENAME ProviderType VALUE NUMERIC 131072
VALUENAME UserName VALUE ""
END ACTIONLISTON
ACTIONLISTOFF
VALUENAME ProviderName VALUE DELETE
VALUENAME ProviderType VALUE DELETE
VALUENAME RemotePath VALUE DELETE
VALUENAME UserName VALUE DELETE
END ACTIONLISTOFF

PART !!RemotePath EDITTEXT REQUIRED EXPANDABLETEXT
DEFAULT !!RemotePath_FDefault
VALUENAME RemotePath
END PART
End Policy



End Category
End Category

[strings]
sSettings="Your Name"
Network="Your Name"
Winlogon="Winlogon"
DefaultDomain="Default Domain"
DefaultDomainDefault="Your NETBIOS DOMAIN NAME"
Connections="Connections"
MapF="Map Drive F:"
MapF_Warn="Don't use if HOMEDIR also set to F:"
RemotePath="Remote Path"
RemotePath_Default="\\server\share"
RemotePath_FDefault="\\yourservername\yoursharename"

 

[wendsley]

I have taken the text above and I have pasted it into notepad then I renamed it test.adm. I then went into GPO and added a new template to the user area... The template added but under administrative templates there was a "your name" folder then there was another folder called "connections" There is nothing under the connections folder though.. I replaced the correct share information but the drive is not being mapped... any ideas?

 

[wendsley]

OK.... I added this .adm file with poledit and I saw the mapped drive choices... but... when I apply the mapped drive setting it does not take effect.. I am running winxp logging into a domain with mixed mode. It seems that I am recieving the other policies that the ntconfig.pol is applying but not the drive mappings..As the post above states.. when I add the template to the GPO area it does not even show the drive mapping options... Unable to make this work.

 

[jockojem]

Wendsley... I am not sure about the poledit problem... however with the GPO you need to read the document I recommend above about tattooing the registry. As these settings are not in HKLM\software\policies they can be applied by a GPO but not removed. Hence they are "unmanageable". The document explains how to turn off filtering to see these "unmanageable" policy objects.

Jem

 

[wendsley]

Thanks for your help...