drive mapping

[David]

Hi everyone, I need some help.

Recently I have started to administrate a network with
windows 2000 server, and I had no idea of how active
directory works, before this I worked with Novell Netware.
After some days I finally found the way to map a network
drive corresponding to user´s own private folder in the
server. The fact is that now I tried to map a drive
relative to a group, I mean 1 for marketing, other one for
finacials, and so on. The problem is that I think groups
are not very fine created, as I can not find how to
associate a policy to map that drive in the groups.

Might anybody tell me how groups should be created, so
that this task is easily made?, or once the group is
created, how to map a drive for a group?.

If you know of a site where I can find a manual to learn
about active directory, please tell me.

Thank you a lot.

 

[Cary Shultz [A.D. MVP]]

David,

This is a fun topic. I spent a good amount of time searching for an answer
on how to do this about one year ago and I found a lot of very useful stuff.

There are several ways that you could do this. You can use KIX to do this,
you can use the good old .bat method with the IfMember utility file or you
can use .vbs / group policy to do this.

I currently have an environment ( all WIN2000 Pro SP4 and WINXP Pro SP1a on
the client side ) that makes use of KIX. Here is a short example of the
appropriate section in the logon script [ note: not a login script ;-) ]
using KIX:

========================================================================
If @userid = "Administrator" or @userid = "Admin"
use T: "\\server\Admins"
Else
Select
Case InGroup("GSG_Finance")
use T: "\\server\Finance"
Case InGroup("GSG_Accounting")
use T: "\\server\Accounting"
Case InGroup("GSG_Marketing")
use T: "\\server\Marketing"
EndSelect
EndIf

=======================================================================

You might also want to take a look at Richard Mueller's web site at
http://www.rlmueller.net for some really good logon scripts. Here is a link
to one of those scripts: http://www.rlmueller.net/Logon3.htm.

As far as the actual set up of the security groups, I might suggest the
following:

1) create a global security group for each department ( since 'department'
seems to be the driving force behind your need ). I tend to name each
security / distribution group gsg_xxxxx or gdg_xxx where the gsg = Global
Security Group and gdg = Global Distribution Group. So, to follow that path
you would have a gsg_finance, a gsg_accounting, a gsg_marketing, etc. etc.
etc. The reason that I put the gsg_ or the gdg_ in front is so that I can
have a gsg_finance as well as a gdg_finance. It also lets me know
immediately what type of group it is...
2) place your user account objects in the appropriate security group

This has the added benefit that you can use these gsg's for permissions on
the file server. If you have a FINANCE folder and only the members of the
finance department are to have access the you can create a local security
group ( I would call it lsg_finance to follow my example ), apply the
permissions to that security group and then make gsg_finance a member of the
lsg_finance. Now only those user account objects which are a member of the
gsg_finance group will have access to the FINANCE folder.

Does this help you?

Cary


Hi everyone, I need some help.

Recently I have started to administrate a network with
windows 2000 server, and I had no idea of how active
directory works, before this I worked with Novell Netware.
After some days I finally found the way to map a network
drive corresponding to user´s own private folder in the
server. The fact is that now I tried to map a drive
relative to a group, I mean 1 for marketing, other one for
finacials, and so on. The problem is that I think groups
are not very fine created, as I can not find how to
associate a policy to map that drive in the groups.

Might anybody tell me how groups should be created, so
that this task is easily made?, or once the group is
created, how to map a drive for a group?.

If you know of a site where I can find a manual to learn
about active directory, please tell me.

Thank you a lot.

 

[David]

Yes, you help me a lot.
Thank you so much.

-----Original Message-----
David,

This is a fun topic. I spent a good amount of time searching for an answer
on how to do this about one year ago and I found a lot of very useful stuff.

There are several ways that you could do this. You can use KIX to do this,
you can use the good old .bat method with the IfMember utility file or you
can use .vbs / group policy to do this.

I currently have an environment ( all WIN2000 Pro SP4 and WINXP Pro SP1a on
the client side ) that makes use of KIX. Here is a short example of the
appropriate section in the logon script [ note: not a login script ;-) ]
using KIX:

========================================================== ==============
If @userid = "Administrator" or @userid = "Admin"
use T: "\\server\Admins"
Else
Select
Case InGroup("GSG_Finance")
use T: "\\server\Finance"
Case InGroup("GSG_Accounting")
use T: "\\server\Accounting"
Case InGroup("GSG_Marketing")
use T: "\\server\Marketing"
EndSelect
EndIf

========================================================== =============

You might also want to take a look at Richard Mueller's web site at
http://www.rlmueller.net for some really good logon scripts. Here is a link
to one of those scripts: http://www.rlmueller.net/Logon3.htm.

As far as the actual set up of the security groups, I might suggest the
following:

1) create a global security group for each department ( since 'department'
seems to be the driving force behind your need ). I tend to name each
security / distribution group gsg_xxxxx or gdg_xxx where the gsg = Global
Security Group and gdg = Global Distribution Group. So, to follow that path
you would have a gsg_finance, a gsg_accounting, a gsg_marketing, etc. etc.
etc. The reason that I put the gsg_ or the gdg_ in front is so that I can
have a gsg_finance as well as a gdg_finance. It also lets me know
immediately what type of group it is...
2) place your user account objects in the appropriate security group

This has the added benefit that you can use these gsg's for permissions on
the file server. If you have a FINANCE folder and only the members of the
finance department are to have access the you can create a local security
group ( I would call it lsg_finance to follow my example ), apply the
permissions to that security group and then make gsg_finance a member of the
lsg_finance. Now only those user account objects which are a member of the
gsg_finance group will have access to the FINANCE folder.

Does this help you?

Cary


Hi everyone, I need some help.

Recently I have started to administrate a network with
windows 2000 server, and I had no idea of how active
directory works, before this I worked with Novell Netware.
After some days I finally found the way to map a network
drive corresponding to user´s own private folder in the
server. The fact is that now I tried to map a drive
relative to a group, I mean 1 for marketing, other one for
finacials, and so on. The problem is that I think groups
are not very fine created, as I can not find how to
associate a policy to map that drive in the groups.

Might anybody tell me how groups should be created, so
that this task is easily made?, or once the group is
created, how to map a drive for a group?.

If you know of a site where I can find a manual to learn
about active directory, please tell me.

Thank you a lot.


.

 

[Cary Shultz [A.D. MVP]]

David,

If you need more help please make another post. Glad that I was able to
help! Si necesitas escribir en espanol, por favor! No hay problemas!

Cary

Yes, you help me a lot.
Thank you so much.

-----Original Message-----
David,

This is a fun topic. I spent a good amount of time searching for an answer
on how to do this about one year ago and I found a lot of very useful stuff.

There are several ways that you could do this. You can use KIX to do this,
you can use the good old .bat method with the IfMember utility file or you
can use .vbs / group policy to do this.

I currently have an environment ( all WIN2000 Pro SP4 and WINXP Pro SP1a on
the client side ) that makes use of KIX. Here is a short example of the
appropriate section in the logon script [ note: not a login script ;-) ]
using KIX:

========================================================== ==============
If @userid = "Administrator" or @userid = "Admin"
use T: "\\server\Admins"
Else
Select
Case InGroup("GSG_Finance")
use T: "\\server\Finance"
Case InGroup("GSG_Accounting")
use T: "\\server\Accounting"
Case InGroup("GSG_Marketing")
use T: "\\server\Marketing"
EndSelect
EndIf

========================================================== =============

You might also want to take a look at Richard Mueller's web site at
http://www.rlmueller.net for some really good logon scripts. Here is a link
to one of those scripts: http://www.rlmueller.net/Logon3.htm.

As far as the actual set up of the security groups, I might suggest the
following:

1) create a global security group for each department ( since 'department'
seems to be the driving force behind your need ). I tend to name each
security / distribution group gsg_xxxxx or gdg_xxx where the gsg = Global
Security Group and gdg = Global Distribution Group. So, to follow that path
you would have a gsg_finance, a gsg_accounting, a gsg_marketing, etc. etc.
etc. The reason that I put the gsg_ or the gdg_ in front is so that I can
have a gsg_finance as well as a gdg_finance. It also lets me know
immediately what type of group it is...
2) place your user account objects in the appropriate security group

This has the added benefit that you can use these gsg's for permissions on
the file server. If you have a FINANCE folder and only the members of the
finance department are to have access the you can create a local security
group ( I would call it lsg_finance to follow my example ), apply the
permissions to that security group and then make gsg_finance a member of the
lsg_finance. Now only those user account objects which are a member of the
gsg_finance group will have access to the FINANCE folder.

Does this help you?

Cary


Hi everyone, I need some help.

Recently I have started to administrate a network with
windows 2000 server, and I had no idea of how active
directory works, before this I worked with Novell Netware.
After some days I finally found the way to map a network
drive corresponding to user´s own private folder in the
server. The fact is that now I tried to map a drive
relative to a group, I mean 1 for marketing, other one for
finacials, and so on. The problem is that I think groups
are not very fine created, as I can not find how to
associate a policy to map that drive in the groups.

Might anybody tell me how groups should be created, so
that this task is easily made?, or once the group is
created, how to map a drive for a group?.

If you know of a site where I can find a manual to learn
about active directory, please tell me.

Thank you a lot.


.

 

[Guest]

Thnk you, muchas gracias!!

just one thing, what do you mean by KIX??

-----Original Message-----
David,

If you need more help please make another post. Glad that I was able to
help! Si necesitas escribir en espanol, por favor! No hay problemas!

Cary

Yes, you help me a lot.
Thank you so much.

-----Original Message-----
David,

This is a fun topic. I spent a good amount of time searching for an answer
on how to do this about one year ago and I found a lot of very useful stuff.

There are several ways that you could do this. You can use KIX to do this,
you can use the good old .bat method with the IfMember utility file or you
can use .vbs / group policy to do this.

I currently have an environment ( all WIN2000 Pro SP4 and WINXP Pro SP1a on
the client side ) that makes use of KIX. Here is a short example of the
appropriate section in the logon script [ note: not a login script ;-) ]
using KIX:

=========================================================

=

==============
If @userid = "Administrator" or @userid = "Admin"
use T: "\\server\Admins"
Else
Select
Case InGroup("GSG_Finance")
use T: "\\server\Finance"
Case InGroup("GSG_Accounting")
use T: "\\server\Accounting"
Case InGroup("GSG_Marketing")
use T: "\\server\Marketing"
EndSelect
EndIf

=========================================================

=

=============

You might also want to take a look at Richard Mueller's web site at
http://www.rlmueller.net for some really good logon scripts. Here is a link
to one of those scripts: http://www.rlmueller.net/Logon3.htm.

As far as the actual set up of the security groups, I might suggest the
following:

1) create a global security group for each department ( since 'department'
seems to be the driving force behind your need ). I tend to name each
security / distribution group gsg_xxxxx or gdg_xxx where the gsg = Global
Security Group and gdg = Global Distribution Group. So, to follow that path
you would have a gsg_finance, a gsg_accounting, a gsg_marketing, etc. etc.
etc. The reason that I put the gsg_ or the gdg_ in front is so that I can
have a gsg_finance as well as a gdg_finance. It also lets me know
immediately what type of group it is...
2) place your user account objects in the appropriate security group

This has the added benefit that you can use these gsg's for permissions on
the file server. If you have a FINANCE folder and only the members of the
finance department are to have access the you can create a local security
group ( I would call it lsg_finance to follow my example ), apply the
permissions to that security group and then make gsg_finance a member of the
lsg_finance. Now only those user account objects which are a member of the
gsg_finance group will have access to the FINANCE folder.

Does this help you?

Cary


Hi everyone, I need some help.

Recently I have started to administrate a network with
windows 2000 server, and I had no idea of how active
directory works, before this I worked with Novell Netware.
After some days I finally found the way to map a network
drive corresponding to user´s own private folder in the
server. The fact is that now I tried to map a drive
relative to a group, I mean 1 for marketing, other one for
finacials, and so on. The problem is that I think groups
are not very fine created, as I can not find how to
associate a policy to map that drive in the groups.

Might anybody tell me how groups should be created, so
that this task is easily made?, or once the group is
created, how to map a drive for a group?.

If you know of a site where I can find a manual to learn
about active directory, please tell me.

Thank you a lot.


.

.

 

[Cary Shultz [A.D. MVP]]

Sorry,

KIX is Kixtart. Go to http://www.kixtart.org

HTH,

Cary

Thnk you, muchas gracias!!

just one thing, what do you mean by KIX??

-----Original Message-----
David,

If you need more help please make another post. Glad that I was able to
help! Si necesitas escribir en espanol, por favor! No hay problemas!

Cary

Yes, you help me a lot.
Thank you so much.

-----Original Message-----
David,

This is a fun topic. I spent a good amount of time searching for an answer
on how to do this about one year ago and I found a lot of very useful stuff.

There are several ways that you could do this. You can use KIX to do this,
you can use the good old .bat method with the IfMember utility file or you
can use .vbs / group policy to do this.

I currently have an environment ( all WIN2000 Pro SP4 and WINXP Pro SP1a on
the client side ) that makes use of KIX. Here is a short example of the
appropriate section in the logon script [ note: not a login script ;-) ]
using KIX:

=========================================================

=

==============
If @userid = "Administrator" or @userid = "Admin"
use T: "\\server\Admins"
Else
Select
Case InGroup("GSG_Finance")
use T: "\\server\Finance"
Case InGroup("GSG_Accounting")
use T: "\\server\Accounting"
Case InGroup("GSG_Marketing")
use T: "\\server\Marketing"
EndSelect
EndIf

=========================================================

=

=============

You might also want to take a look at Richard Mueller's web site at
http://www.rlmueller.net for some really good logon scripts. Here is a link
to one of those scripts: http://www.rlmueller.net/Logon3.htm.

As far as the actual set up of the security groups, I might suggest the
following:

1) create a global security group for each department ( since 'department'
seems to be the driving force behind your need ). I tend to name each
security / distribution group gsg_xxxxx or gdg_xxx where the gsg = Global
Security Group and gdg = Global Distribution Group. So, to follow that path
you would have a gsg_finance, a gsg_accounting, a gsg_marketing, etc. etc.
etc. The reason that I put the gsg_ or the gdg_ in front is so that I can
have a gsg_finance as well as a gdg_finance. It also lets me know
immediately what type of group it is...
2) place your user account objects in the appropriate security group

This has the added benefit that you can use these gsg's for permissions on
the file server. If you have a FINANCE folder and only the members of the
finance department are to have access the you can create a local security
group ( I would call it lsg_finance to follow my example ), apply the
permissions to that security group and then make gsg_finance a member of the
lsg_finance. Now only those user account objects which are a member of the
gsg_finance group will have access to the FINANCE folder.

Does this help you?

Cary


Hi everyone, I need some help.

Recently I have started to administrate a network with
windows 2000 server, and I had no idea of how active
directory works, before this I worked with Novell Netware.
After some days I finally found the way to map a network
drive corresponding to user´s own private folder in the
server. The fact is that now I tried to map a drive
relative to a group, I mean 1 for marketing, other one for
finacials, and so on. The problem is that I think groups
are not very fine created, as I can not find how to
associate a policy to map that drive in the groups.

Might anybody tell me how groups should be created, so
that this task is easily made?, or once the group is
created, how to map a drive for a group?.

If you know of a site where I can find a manual to learn
about active directory, please tell me.

Thank you a lot.


.

.