Windows Logon Scripts - Drive Mappings

[djclark]

Alright, so I have looked around on the internet for a while now, and I haven't even found somebody with the same question as me!

Basically we are setting up Network Shares for Professional Development for each of the departments at our school, and I need to map drives for them.

I have created Security Groups for each department in AD, and a share for each department as well.

I know how to map Network Drives for people based on Security Groups through Logon Scripts using VBScript, but the problem is I have people in Multiple Departments, and not enough Drive Letters to give each Department its own letter.

So: Is there a way to either assign a drive that has multiple letters, such as "VPAPD:\" or map say, the "P:\" drive to an empty directory, then based on the Security Group they are in, create Folders within that "P" drive for their Departments PD Share?

Almost all of the Teachers are using Terminal Services to a Windows Server 2003 box, but will eventually be rolled to RDS on 2008 R2.

We have an Active Directory domain, and our current Domain Controller is a Windows Server 2003 R2 Enterprise x64 Box, but will eventually be rolled to Server 2008 R2.

[jinnantonnixx]

replying from phone, so excuse the short reply.
it sounds like 'access based enumeration' is a way of solving that problem.

[glennda]

Yup as above - i would create a share with all the folders in - for example \\server\PD then have all the folders in the pd and setup perms so they cannot see what they don't have access to.

[Arthur]

I would do what Glennda suggested as it's much easier to have a single drive letter. Alternatively you could create a shortcut which points to the UNC path of the share.

To use access-based enumeration on Windows Server 2003 you need to download this update from Microsoft. More details here.

[djclark]

Thank you guys for the fast reponse!

Access-Based Enumeration was the solution to my problem, and I am glad to now know about this Windows resource.

Thanks.

[mavhc]

I map drives to the main department, and then just give them a shortcut to the DFS structure for anything else