How To Update Local Server Data For Map Services

From my previous blog post, I have discussed on how to implement File Server Resource Managing director on windows server 2016 (here). Also we have discussed how to create and configure quota, configuring file screening and generating reports. Afterwards implementing file server, many people face the trouble of how to map the file server resources (share folder) to the users. From this postal service let'southward talk over on implementing share folders and mapping them to individual users or groups of users with shared admission.

Continuing with previous post I'k using the Windows Server 2016 File Server Resource Manager in a domain surround to configure share folders.

Map Users Personal Drive with FSRM

Most It departments are willing to provide a centralized location to salvage users valuable data in gild to minimize the risks of saving them in users computers. Local saving locations such as PC's or Laptops tin can exist compromised by a third political party or user might accidently delete them and there might exist no backups taken to recover. While managing these information in centrally, organizations can make sure information is available with regular backups and secured from a third party. But when managing information centrally, information should be secured and should not be able to admission past users other than the possessor. Too these data should be in a place that hands access to the user without much hassle.

In Active directory environments, there is an pick called Home Folders. Domicile folder is a folder created with the user's SamAccount proper noun and only accessible to the detail user other than the domain admin. Commencement you accept to create the share location in the file server with the relevant permissions.

Post-obit step by stride approach can take to create the share folders and publish them using Home Binder option in Agile Directory.

Login to the server where you lot have installed File Server Resources Manager
Open Server Manager – File and Storage Services – Shares – New Share
Select SMB Share – Avant-garde
Select the server path for the share
Blazon the Share name followed by $ sign
Enable access-based emulation and caching
In the permissions page, you lot have to ready the correct permissions to ovoid simply the relevant user tin can access the folder. To add the permissions click customize permissions
On the permissions tab, Disable the inheritance and then click convert inherited permissions into explicit permissions on this objec t
Make certain permissions are co-ordinate to the following prototype, if not change appropriately
Select User Files on Management properties
Yous can put the quota from the next window or using FSRM, I prefer to do it in the FSRM, make sure you take select the Automobile employ template and create quota so all users volition have a personal quota in their folders.
Confirm the details and create the share
Next you need to copy the exact share proper noun
Login to the domain controller, select the users (y'all can select multiple users) right click – properties – Profile , put the copied share binder followed by " %UserName%" , this tag will add together the right user name and useful when adding for multiple users.
Click apply and OK, if at that place is annihilation incorrect with the permissions, there will exist an fault saying folder cannot create.
Login to a machine with the user and you tin can see the binder is created and mapped to the user.

Map Share Using Group Policy

There are situations you lot have to map multiple drives to users other than the domicile folder. In old days, you accept to identify a logon script on each machine to archive this. But with Windows Server 2008R2 and above you lot can do this by Grouping Policies. As well this share or drive tin be mapped to a security grouping with detail targeting.

Before creating the GPO, create the share folder according to the above steps. Then

Create a new GPO, Edit – User Configurations – Windows Settings – Bulldoze Maps
Click New- Mapped Bulldoze
New bulldoze properties, select Update as the activity, Share location, Reconnect and the Bulldoze letter of the alphabet.
This volition Map the share folder to the OU which it's targeted.
Note – Sometimes you may need to target the Drive to a security group without considering the OU. This is called item level targeting, follow the steps from signal v
Become to the common tab and tick Item Level Targeting
Click New Item and select Security Group
Select the security group in the group space
Click OK and Apply the policy, make sure you run a GP Update in the domain controller. User take to re-login to the organisation to accept the effect.