Mapping domain drives with inTune

[garethEds]

Good afternoon,

 

As part of my testing, I am trying to map some of the drives on our domain to our inTune device. I've followed a script on a website and it maps the drives but they have huge red cannot connect crosses against them. They are showing the FQDN.

 

When I click on them, they ask me to authenticate. I do as a domain admin and they work and I can access the files.

 

But - I don't want that. These are open shares for staff users which contain resources. Any idea what security settings I need to set on my domain folders to allow this open access across the two separate systems?

 

Cheers

 

Gareth

[psydii]

I was hoping someone might jump in by now with a solution. However they have not.

 

If you can post a link to the script/article I might be able to parse it and see if anything jumps out.

 

However - I wonder if you are falling between two stools here. We moved folders to OneDrive and Sharepoint BEFORE we moved to Intune. The "obvious" solution is to adjust peoples working practice and have the folders on SharePoint/Teams (ideally segregated by department - but this depends on size/phase of school, and potentially whether we're talking single school or MAT), which they access via the web or the OneDrive client. To spend time mapping drives to legacy network shares via Intune on a pure-Intune managed device seems like investing further in a dead-end.

 

Personally I do not believe ODM is the correct approach either, but many would disagree with me - and I haven't really looked into it. smb network shares are a legacy we need to take a step away from at every opportunity.

[jslate1980]

Am I right in thinking these are cloud only devices? The issues you are raising with authentication are due to cloud only devices not being able to authenticate to the domain. Here is a useful video

plus a good article on what you can do to setup single sign-on to the local domain https://msendpointmgr.com/2021/08/15/sso-to-domain-resources-from-azure-ad-joined-devices-the-mega-series/. Personally as @psydii has suggested it maybe easier to move this content to office 365.

[5tu]

If your on prem AD users are synced to O365 via AD Connect, then permissions should be seamless even when using Intune devices not joined to the on-prem domain.

 

https://learn.microsoft.com/en-us/entra/identity/devices/device-sso-to-on-premises-resources?view=o365-worldwide

[Quinn]

I have the same issue and would like to know. However luckily for shares and personal drives we use OneDrive and SharePoint which would all be in the teams app. I have a few odd drives which some apps still require, as its only a handful of people I've ended up mapping the drive manually by entering their login details when it asks and clicking 'remember credentials' while I'm with them.