Hey everyone! I've been trying to track down what's causing a network drive to map to K: on some of my users' PCs. I know the destination of this drive, but the actual process that's creating this mapping is a mystery. Here's what I've tried so far:
- I ran a gpresult /h on one user's machine, but I couldn't find any Group Policy Objects (GPO) that directly map the drive or run a script for it.
- We do have a logon script in our Active Directory that takes care of other drives, but it doesn't affect the K: drive in question.
- I've checked the server with the share, and I don't see any scripts there that would trigger this mapping.
The drive mapping is still active; even after I deleted it from a test user's account, it reappeared when they logged back in. I'm sure it's something simple, but I'm running out of leads. Any insights or suggestions would be greatly appreciated!
3 Answers
Check the local security logs both on the machines in question and at the domain level. It’s essential to see if there are any logged actions that could give you clues about what's triggering the mapping of that drive. You're looking for specific Event IDs—have you checked for any of those yet?
You might want to dig into the Active Directory profile of the users. Sometimes home folder mappings can show up in that area and could be causing the K: drive mapping. This specific drive mapping could also be linked to a particular profile setting.
Have you considered having one of the affected users log into a computer they've never used before? That could help you figure out if the problem is linked to their specific machine or if it's something broader affecting the entire domain. If the K: drive doesn't appear when they log into a new PC, it could suggest a stuck GPO.
Good point! But my concern is that the server where that K: drive currently lives is being decommissioned soon. I need to track down the source of the mapping before it goes!
I've looked into the event logs, but haven't found anything useful so far. Are there certain Event IDs you recommend I focus on?