Map Drive on Windows Server 2003 R2 at System Boot


Recommended Posts

Hey Guys,

I'm currently setting up a Windows Server 2003 R2 box and have a Service which requires information from a Network Drive, the issue is if the server is rebooted then all Network Drives are dropped until an Interactive Login occurs.

How could I go about setting up the system to automatically mount some drives on the same user as the service on system boot.

Example mount \\server\exampleshare\ as serviceuser@exampledomain.com

Thanks

Chris

  On 26/06/2012 at 17:29, xendrome said:

This only covers mapping drives on Logon - which is already happening.

  On 26/06/2012 at 17:37, sc302 said:

system policy logon script vs user policy logon script. as xendrome is trying to point to.

I'll see if I can find it in the GPOs - Thanks.

  On 26/06/2012 at 18:14, CPressland said:

Well, I had to reboot my Domain Controller due to not being able to RDP into it and it's been 'Applying Computer Settings' for the last half an hour.. joy.

Will update thread when I'm back in.

Sounds like you have a DNS issue...

probably using a internet server as a dns server instead of itself...domain controllers do not follow the same policies as pc's and domain computers do not follow the same policies as home computers.

if it is part of a domain you never use external dns servers....only internal dns servers and if your internal dns server doesn't know about it then it will use either the root dns servers or it will use dns servers you define in the forwarders tab. you normally do not have dns servers at home so using the internet dns servers are fine in that environment.

Okay, did this:

Created a new OU and moved the Server I need this to happen on to said OU.

Created new Policy based on that OU and defined a Startup Script as follows:


net use Z: \\server\share1
net use X: \\server\share2
net use Y: \\server\share3
[/CODE]

Rebooted Server, nothing happened, service still complains no drives can be found.

what do you see in the event logs? also what rights are assigned to those folders....if they are specific then you need to troubleshoot to the point of you being able to map them from any computer regardless of who logs on or what domain they belong to. basically if you can't map it with a computer in a workgroup of boohoo with a user name of noway, then it won't work. As you server put to you nicely, go pound sand. you may have to put in user credentials to gain access to those drives even if they are "open" or "unrestricted".

if you disable ipv6 properly, you wouldn't have that issue. it is done in the registry, not by simply unchecking it.

http://support.microsoft.com/kb/929852

as per the kb linked to:

  Quote
Note Unchecking the checkbox on a network adapter will not disable IPv6 on the host.
  On 26/06/2012 at 19:05, sc302 said:

what do you see in the event logs? also what rights are assigned to those folders....if they are specific then you need to troubleshoot to the point of you being able to map them from any computer regardless of who logs on or what domain they belong to. basically if you can't map it with a computer in a workgroup of boohoo with a user name of noway, then it won't work. As you server put to you nicely, go pound sand. you may have to put in user credentials to gain access to those drives even if they are "open" or "unrestricted".

if you disable ipv6 properly, you wouldn't have that issue. it is done in the registry, not by simply unchecking it.

http://support.microsoft.com/kb/929852

as per the kb linked to:

Hey, just tweaked the script to include an authenticated Domain Username and Password and it worked fine.

As below:

net use Z: \\server\share1 /user:[Logon Server]\[User Name] [Password] /persistent:yes[/CODE]

As long as the service now works without having a user logged in then everything is great :)

Regarding IPv6, Budman disabled it, blame him ;) And yes, he disabled it via the registry as it was supposed to be. Upon removing the registry tweak it's come back up as normal. Not sure whats causing it, either way added both dc.44kenlane.com and dc to the hosts file with IPv4 lookup.

"Yeah, was due to disabling IPv6 on the Server."

What are you trying to blame on the non use of IPv6?? That sure has nothing to do with your resolving a netbios unc call like \\server1

And your not using ipv6, so why or how could you possible point to an IPv6 dns? You have NO use of IPv6 -- do you?? Then if no then yes you can and to be honest it should be disabled.

Security 101, protocols and services that you are not using should not be enabled!

"But the Server takes 10-times longer to boot with IPv6 turned off"

BS - plain and SIMPLE BS!!

Going to test this right now.. Simple since its one command to turn it on or off.

Ok, I got side tracked at work - and then drove home had some dinner. Had a few minutes free before watching hells kitchen with the wife.

So 2k8r2 running on a vm -- what it runs on is meaningless for this test.

So I grabbed the sdk, so I could use xbootmgr and get traces of boot time.

So as you can see it was setup for ipv4 only

post-14624-0-25040400-1340756869.png

Ok then ran

xbootmgr -trace boot -numRuns 3

The changed over to back to having ipv6 deafault out of the box

post-14624-0-57995200-1340756886_thumb.p

So here are 2 traces done - notice the locations of the files. One was done with ipv4, other was with ipv6

post-14624-0-70420000-1340756877_thumb.p

So does that look like 10X boot up time to you??

Like I said BS!! Where did you get such an idea?? BTW -- the slightly!! I mean slightly faster in these tests was ipv4 ;) I would guess your going to see fluctuations in these numbers, I did - but for such a bone head statement I am not going to do a 10 run with averages, etc. I just grabbed the 3rd run of each test, -numRuns 3 remember.

I would suggest you do the test yourself -- run it 100 times each if you want. When you see even a 2x difference in boot - please post the trace for us to look at!

You can grab the sdk so you can get xbootmgr here

http://www.microsoft...ls.aspx?id=3138

You only need the 32bit developer tools to get the wpt_x64.msi which is what you need for 2k8r2, or if you want it like 16MB I could send it too you. And you can do your own tracing with ipv6 on and off, etc.

Now if yours is taking even say 1.5x longer -- then you got something wrong that is for sure!

Like I said, I'll diagnose this properly when I have time. Upon further inspection it may have something to do with my testing of Server 2012 as a DC and joining this Forest.

This Server will only get rebooted when ESXi gets rebooted, so I really don't care that it's taking so long to start with or without IPv6. Besides, this thread was to tackle a different issue, which I have since resolved. I believe you still have VPN access if you want to diagnose this yourself.

Have not even looked at 2012 yet, have no idea what bone head **** they did now playing with a protocol that is not quite ready for prime time. I would hope you have the ability to turn it off in 2012 as well.

Your really not going to see ipv6 mainstream for years and years. I doubt it will be even close to mainstream before end of life of 2012 server.

It could have something to do with ipv6 brokenness, yes that is a real term ;) Has to do with the selection of ipv6 over ipv4 when maybe ipv6 is a bad choice because its a tunneled connection or not quite working right in a dual stack setup.

Diagnosed the issue, when enabling IPv6 it forces communication with Server 2012 over said protocol and disables IPv4 comms. This breaks a few services on Server 2008. When I demoted the Server 2012 box from the Domain as a DC the boot time went back to normal in 2008.

Weird....

  On 29/06/2012 at 18:24, BudMan said:

So MS did the correct thing? Ipv6 is disabled by default in 2012?

No, in an AD environment with Server 2012 IPv6 is forced by default, you cannot disable it, in joining the 2012 server to the 2008 server it forced all comms on 2008 to run over IPv6, which was disabled in the registry, causing the processes to show 'no network connection'. Hence why when I re-enabled IPv6 on the 2008 box it began to work correctly again.

Solution was to demote the 2012 Server as a DC, this allowed the 2008 server to resume using the IPv4 protocol.

All in all, serves me right for using beta software.

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • CPU-Z 2.16 by Razvan Serea CPU-Z is a freeware utility that gathers information on some of the main devices of your system. CPU-Z does not need to be installed, just unzip the files in a directory and run the .exe. In order to remove the program, just delete the files. The program does not copy any file in any Windows directory, nor write to the registry. CPU Name and number. Core stepping and process. Package. Core voltage. Internal and external clocks, clock multiplier. Supported instructions sets. All cache levels (location, size, speed, technology). Mainboard Vendor, model and revision. BIOS model and date. Chipset (northbridge and southbridge) and sensor. Graphic interface. Memory Frequency and timings. Module(s) specification using SPD (Serial Presence Detect) : vendor, serial number, timings table. System Windows and DirectX version. CPU-Z 2.16 changelog: AMD Ryzen Z2 and Z2 Extreme (Strix Point). AMD Ryzen 9 8945HX, 8940HX, Ryzen 7 8840HX, 8745HX (Dragon Range refresh). Improved support of AMD Ryzen AI 7 350 and Ryzen AI 5 340 (Kraken Point). Zhaoxin KaiXian KX-U6780A and KX-U6580 (LuJiaZui, 8 cores). AMD Radeon RX 9060 XT (Navi 44). NVIDIA RTX 5060 Ti (GB206), RTX 5060 (GB206), RTX 5050 (GB207) Download: CPU-Z 2.16 | Portable ~3.0 MB (Freeware) View: CPU-Z Website | Screenshot Get alerted to all of our Software updates on Twitter at @NeowinSoftware
    • We will go to Mars to say, "We landed on another planet". However, we won't be staying because there is little reason to do so. Tourism for (and hang gliding within) the Valles Marinaris being an exception. HOWEVER, the actual reason to go to Mars is to develop the technologies and infrastructure needed for asteroid mining, the key to ending Earth's resource depletion worries once and for all. https://science.howstuffworks.com/asteroid-mining.htm And there is big, BIG money in asteroid mining (<- this is Musk's endgame). While there are lots of near-Earth asteroids that can be mined for trillions, if we're going to mine the asteroid belt between Mars and Jupiter, Mars (or one of its two moons) make the best choice for a waystation for processing ore before sending the finished product to Earth or Earth's Moon for manufacturing, etc.
    • The Edge UI team is total dogshit Chrome looks way more consistent. Mica has been broken before. Then suddenly some of the other menu's look different and redesigned, except the extension menu that keeps the old look for months. Then we finally got the global media controls that where coming, not coming, coming back again etc. One day I have the cool new chromium design, the day after it reverts to a design from last year. Then settings pages changes 3 times in a month etc. We get a new tab redesign that is announced with fancy commercials and blog posts everywhere, to never be seen again. It is always something. I think I will finally going back to Chrome because I am tired of this unprofessional UI team where everything seems to be in constant beta or stuff changes overnight and back for no reason.
    • Zen Browser 1.14.2b by Razvan Serea Zen Browser is a privacy-focused, open-source web browser built on Mozilla Firefox, offering users a secure and customizable browsing experience. It emphasizes privacy by blocking trackers, ads, and ensuring your data isn't collected. With Zen Mods, users can enhance their browser experience with various customization options, including features like split views and vertical tabs. The browser is designed for efficiency, providing fast browsing speeds and a lightweight interface. Zen Browser prioritizes user control over the browsing experience, offering a minimal yet powerful alternative to traditional web browsers while keeping your online activity private. Zen Browser’s DRM limitation Zen Browser currently lacks support for DRM-protected content, meaning streaming services like Netflix and HBO Max are inaccessible. This is due to the absence of a Widevine license, which requires significant costs and is financially unfeasible for the developer. Additionally, applying for this license would require Zen to be part of a larger company, similar to Mozilla or Brave. Therefore, DRM-protected media won't be supported in Zen Browser for the foreseeable future. Zen Browser offers features that improve user experience, privacy, and customization: Privacy-Focused: Blocks trackers and minimizes data collection. Automatic Updates: Keeps the browser updated with security patches. Zen Mods: Customizable themes and layouts. Workspaces: Organize tabs into different workspaces. Compact Mode: Maximizes screen space by minimizing UI elements. Zen Glance: Quick website previews. Split Views: View multiple tabs in the same window. Sidebar: Access bookmarks and tools quickly. Vertical Tabs: Manage tabs vertically. Container Tabs: Separate browsing sessions. Fast Profile Switcher: Switch between profiles easily. Tab Folders: Organize tabs into folders. Customizable UI: Personalize browser interface. Security Features: Inherits Firefox’s robust security. Fast Performance: Lightweight and optimized for speed. Zen Mods Customization: Deep customization with mods. Quick Access: Easy access to favorite websites. Open Source: Built on Mozilla Firefox with community collaboration. Community-Driven: Active development and feedback from users. GitHub Repository: Contribute and review the source code. Zen Browser 1.14.2b changes: Fixed an issue when disabling mods Download: Zen Browser | 73.6 MB (Open Source) Download: Zen Browser ARM64 | Other Operating Systems View: Zen Browser Home Page | Screenshots 1 | 2 | Reddit Get alerted to all of our Software updates on Twitter at @NeowinSoftware
    • What do you mean no one can land an unammaned craft on the moon? It has been done plenty of times before... Kubrick definitely did no such thing and it would be far easier to actually go the moon than try to fake it. If the US did fake it wouldn't you believe their ideological enemies in the Soviets would have immediately threw up red flags and pointed fingers, instead of congratulating them with the rest of the world?
  • Recent Achievements

    • Explorer
      CHUNWEI went up a rank
      Explorer
    • Contributor
      SnyPer456 went up a rank
      Contributor
    • First Post
      LELO2025 earned a badge
      First Post
    • First Post
      Caltor earned a badge
      First Post
    • One Month Later
      LagFighterZ earned a badge
      One Month Later
  • Popular Contributors

    1. 1
      +primortal
      394
    2. 2
      +FloatingFatMan
      153
    3. 3
      ATLien_0
      149
    4. 4
      macoman
      66
    5. 5
      +thexfile
      63
  • Tell a friend

    Love Neowin? Tell a friend!