S02E18 - How to Map Network Drives on Microsoft Intune Devices - (I.T)

[@Atreyu976]

How would i specify credentials for the mapped drive?

[@daviddiepstraten5397]

I also need to know this for a Synology share.

[@thiagohenp]

Thinking the same here... cause this script it's not working for me. I do not have Windows Hello set up to access on-premises resources. I can only access my file server if I map my drive and then insert LDAP credentials

[@giwrgosskillosnikolaou6073]

Did you guys found a solution regarding this matter ?

[@Theak47forall]

I think trough group rules. You creat a specific group with a mapping rule. When the group is created you add the username you need to it. This way only the specific person gets the mapping event when logging in.

[@vladimirnekic3241]

Amazing that this 2 year old video is still very relavent and extremely helpful and modern techniques used. Thanks a bunch for making this and sharing with the world. Really impressed with the extra network change triggers added. Good Stuff.

[@dizawnofwizar]

What's amazing is how intune still doesn't have a reliable way of mapping drives built in like what 8 years after it's was created?

[@IntuneTraining]

@dizawnofwizar have you tried Rudy’s drive mapping ADMX? call4cloud.nl/2021/03/willy-wonka-and-the-drive-letter-factory/

[@Quick-Nick]

This seems to be a script if you have a local AD and such, but how can I map a shared folder from a NAS with local users (on the NAS) , so how/where can I put a username and password from the NAS?

[@SysteemBeheer-ce4kq]

The script works on Windows 10 machines, but on Win11 we get the error: "wrong usename or password." Any idea?

[@corporatecutie]

When using a PIN with your user credential this fails vs using user credential and password it succeeds.

[@ohGadd]

Cheers on this one Derek, was baffling me for way too long as to why it wasn't working on my end.

[@quintendc7789]

I have been experimenting with the same methode more or less, but ended up with creating a trigger based on the outcome of a query. So in the event with ID 10000 and the eventdata had a name equal to the internal networkname from that organisation. The script would be triggered. You options seems to be less hassle, so I am looking forward to testing it out. Just FYI, my trigger looked like this $trigger = $class | New-CimInstance -ClientOnly $trigger.Enabled = $true $trigger.Subscription = '` *[System[Provider[@Name=''Microsoft-Windows-NetworkProfile''] and EventID=10000]] ` *[EventData[@Name="Internalneworknamehere"]]'

[@DeepFriedLettuce]

I didnt even know that site existed for this. I can't wait to start working on this!

[@losingthewiresdotcom9349]

Thanks, that's brilliant. How about one for connecting to a file server from non-hybrid joined devices using non-hybrid identities?

[@Avean]

Do you guys know how to support UTF8 characters? The label on the drives dont support UTF8. Tried modifying the script but not quite sure where to put -Encoding UTF8

[@nexunaut3890]

So for this script to work in production, I need to enable Active Directory module for PowerShell on all systems?

[@jdrumr12]

This worked great! However, is there a way to reverse/remove the mapped drive using Intune?

[@Sean_Ryan]

Hi, just wondering if you ever found a way to do this?

[@Bryan-lo3pw]

Hmmm did not know that there was a site for this. Is it also possible to use this site make a drive mapping to the "C:\Users\%username%\sharepointsite\Documents" I got a situation that an Citrix connection needs a drivemapping to an networkdrive to store files exported files. Now I have made an manual drive mapping to the Sharepointsite thtat is on the C drive. All the files of this customer is on an Sharepointsite. Got about 4 users that need this. Tnx for any input.

[@dizawnofwizar]

it would be great if you mentioned what the schedule task name was or what dir it was created in so we can find it during troubleshooting (or not find it) FYI it's in the root 'task scheduler library' and it's called 'IntuneDriveMapping' by default

[@michaelmenzie5535]

having the same issue

[@Totalrandomness2011]

How can you map the drive but use specific credentials?

[@RidhwanMalik-q7k]

want to ask, in GPO there is option it will auto mapped in different drive letter when a particular letter is already in used, can this script able to do the same? if cannot can suggest best ways to go about this issue.

[@michaelpyne8318]

Can this be used to map to a Sharepoint document library? Thanks Great video by the way

[@ianwatts6342]

What are you wearing, Jake from Intune Dot Training!?!?!? Uh.. khakis..

[@IntuneTraining]

For the safety of the viewers at home I plead the fifth!

[@networkn]

So, I found this video, looking for a way to connect our newly AzureAD Joined laptops (Previously joined to AD Server, which is going away) to a new Server which will contain just 1 share with no permissions. Does this require AD, or could it be mapped to a "Workgroup" Server?

[@IntuneTraining]

At the end of the day you grant access to the user object not the device (99.99% of the time) so long as there is an account that can authenticate you can access the file share, this can either be a domain account or a local account on the server, the difference comes down to how you create the connection

[@HealthyMBS1]

I enjoy both short and long format videos. The quick "How To" is great to have when you need to get something done. The longer formats are great for gaining a deeper understanding of the technologies and showcase the experience you guys have and the theories behind why you would choose to do something one way instead of another.

[@leongcheechong1681]

Is it possible If we have using the Hybrid ENV , and need to map drive the local AD (through by IP)?

[@IntuneTraining]

Yes. Thats possible. Hybrid devices are still fully AD joined and function as normal.

[@deansstanley82]

Really useful video, been looking into this recently. I'm next looking into c drive hiding next for use in a school environment

[@solomonyasharahla8603]

How would you map a drive to a sharepoint library url?

[@erniepelayo5295]

When I enter my UNC path, it says "Valid UNC path required". Would there be an issue if my UNC path includes a .com?

[@Schnitzer325ci]

Possible.. change to IP?

[@ianwatts6342]

Whatever software you are using to capture the content, really puts a strong fade to the content and is making things really hard to see what's going on.

[@IntuneTraining]

That will be addressed in future videos! I had HDR enabled on my monitor, great for my eyes, not so much for recording!

[@devilmaycry10001]

Thank you for this. I have been enjoining viewing and learning from your channel for the past year or so. What about mapping sharepoint libraries without the use of one drive? Is if possible to do it this way? Thank you again.

[@ThumbsHunter]

is there a way to do this for ios mobile devices with intune?

[@thiagohenp]

In my environment, I do not have Windows Hello set up to access premises resources... For instance, if I want to access my file server, I have to map manually my drive and then insert the LDAP credential, following that PIN key doesn't work. Does this script cover that? I'm thinking that drive mapping will not work (in my case at least), cause I didn't insert my LDAP credentials into the script. Thank you and nice vid!!

[@jigsaw4770]

This was absolutely perfect! Quick, simple, and straight through the steps. Love the description with the timeline. Thanks a ton!

[@staticfl99]

I've also used this to throw in printer additions too.

[@DeepFriedLettuce]

I like the way you think.

[@andone3832]

could you share the printer solution?

[@michaelmenzie5535]

i simply cannot get this to work. Intune says the scripts "failed" but wont say why. i do not see a scheduled task being created. if i run the script manually the drives will map but again, no scheduled task is created.

[@kmrrr1337]

Thank you for this easy solution. I've got one question though: Do you know if drives can be mapped if the devices are AAD only joined + Kerberos Cloud trust instead of hybrid joined?

[@IntuneTraining]

They can indeed, as the user object is completing the authentication call to access the unc paths, not the device object. This is one of the main reasons for cloud Kerberos

[@kmrrr1337]

@@IntuneTraining Thank you alot. This helps me very much and encourages me to try it ASAP.

[@breathinglogic]

Came across this some months ago, works great!!

[@jrasfighlkvjy]

Im having trouble even getting network drives to connect manually. We have intune managed devices with our cloud accounts to login to windows. No onprem active directory. The permissions for the network drive are different than the cloud accounts. They are local to the network drive. Everytime you try to logon to the network drive it throws an error or doesnt reconnect when you reboot the system. Is there anything we are missing or are the azure ad account just no fully capable in Windows?

[@muhammadrashid8284]

Dear for security reason this method is good if we Mapp our on-perm file sever to external users. As our requirements to give access of files remotely without VPN.

[@jamesstrickland5087]

What happens when you need to add a new mapped drive? Do you have to go through the whole process again to generate the Powershell script will all drive map configs in it, or can you setup a new script for each future mapped drive?

[@giwrgosskillosnikolaou6073]

Hello guys, Great video! If i want to ask the users to login with diferrent credentials how is that possible ?

[@jonathang8571]

Have you guys had success mapping a network drive on Mac devices with Intune?

[@geekacullen]

This is fantastic. Apologies if that has already been asked, but it there a way for it too prompt for credentials? I am mapping a drive that uses non-windows creds.

[@MarkVerbruggen]

Is there a way for it too prompt for credentials? I am mapping a drive that uses non-windows creds.

[@ronikuggz3362]

is there a way add print que like this? we did the exact same thing for a print que around 2years ago but now its failing after the print nightmare quality update! any suggestions will be great

[@caterinasilver1195]

I know this is an old post, but where are the PowerShell script changes in the blog post. I don't see them.

[@danielrajan7700]

Hi! Thank you posting this video. I was wondering if it's possible to map a network drive with userprofile or users credential on the file path and deploy it in intune?

[@michaelmenzie5535]

do you deploy the script to a group of "users" or to a group of "devices"? i have it deployed to a group of users and so far its not working

[@socoldinsidex3]

Can this be a User assigned policy or only device assigned policy?

[@youtubeuni]

Does this work for Entra only devices?

[@IntuneTraining]

Yep

[@n8work548]

i think i real microphone could be so much better ! ( the sound has a echo)

[@it-flex8410]

Is this still valid or has MS created an OEM solution?

[@ianwatts6342]

I am thinking of an Azure File Share scenario and a captive portal. Is there an event which triggers after agreeing to some hotel's terms and whatnot?

[@agfreelance]

Hey Jake... on some of my pcs I am out of drive letters. Will this method work for putting the shares into folders?

[@neo03979]

How to setup MFA and SSO. also like the new quick how to.

[@codyhodum1891]

Any idea how to do a "home" share. I was using "\\Server IP\Home\$env:USERNAME" but this fails. The logs show that the variable works but it never maps. Any thoughts on what could be going on. This is being tested with SSO enabled so it is being ran in the proper permission level to access the share. Thanks. BTW you guys are great.

[@IntuneTraining]

Try adding a variable that is populated from "whoami.exe"

[@MrCajunzx6]

what about remote users on VPN connection?

[@noahdelarosa5710]

First of all, I really appreciate all these videos you have posted. I have learned a lot from all your videos I've watched so far. Thank you. So I tried running this and the problem I get is my test computer is running the script as Restricted so although it says succeeded, the mapped drive does not show up. How can I configure this script to either Bypass or run it as Unrestricted? I was trying to find a way to add this, Set-ExecutionPolicy -ExecutionPolicy RemoteSigned -Scope CurrentUser or PowerShell -ExecutionPolicy Bypass, prior to launching the script. Is this the correct way or is there another way?

[@IntuneTraining]

You can pass in the bypass in the commandline. learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_powershell_exe?view=powershell-5.1#-executionpolicy-executionpolicy

[@Zombzap]

Is there a way to add a user and password to the map drive for example if i was to set up a mapped drive to a private endpoint in azure file? Thanks

[@kjetilskardal7503]

Thanks, but unfortunately not working in my use case. We use Azure AD accounts that are not linked to to local AD accounts because of heavy backlog and other things. Can't use AAD-sync either so they don't have permissions to the share. Any ways to still map up the drives without authenticating? Can live with promts for changing to authentication to access with domain.local\user.

[@IntuneTraining]

Fix the account stuff first. You’re causing lots of other issues doing it this way. Don’t work around the root of the issue. Why can’t you sync accounts?

[@garykulovics7705]

Great Video, but when we try to map the drive all looks like it is working Intune tells me it was successful installed the notification pops up saying it was run successful but on the client machine there is no shared drive If I run the PowerShell script on the PC the drive gets mapped Any ideas why it won't work?

[@JO3KAH]

This is happening for me too - Did you find a solution?

[@paulmc7564]

Great video and the timing was perfect! Great idea with the short videos may I say, don't suppose you can do a video on backgrounds & lock screen?

[@daba788]

Can you do a video on how to get the "system Info" for all intune devices :) :)

[@sod16]

Finally! Exactly what I needed. Short format is really good. I'd add a quick example and show the results for novices.

[@ethanmayer3978]

Is it possible to add a sharepoint site locally so you dont have to press the sync button?

[@griedel81]

worked perfectly. Thank you, guys.

[@Nobodyjbh14]

Sweet. Was wondering how to do Mapped Drives with Intune.

[@samturner8857]

Thanks for this - been thinking about how we could do this since starting to watch this channel a couple of day ago!

[@astonish1109]

Awesome content, is this user assign or device or both?

[@RoelofdeGroot]

Thank you! One question though, in the instructions on the blog of the creator of this script he explicitly says that I have to set 'Run script in 64 bit PowerShell Host' to enabled and you seem to let that setting on the default of Disabled. Do you know which setting is correct?

[@IntuneTraining]

In the dev lab I spun this up on the script worked fine without that option enabled.

[@agfreelance]

I really enjoy the short and to the point the videos the best. Keep up the content with only HDR enabled on your screen!

[@andone3832]

How do I own the script to control printers with this method?

[@Leoninmiami]

very helpful. Thanks!!

[@Zugetzu]

The script works when I run it locally, but it fails every time I push it through intune. I have tried "Run script in 64 bit PowerShell Host:Yes/No" no options but to no avail. I cant find any error logs either. The script is being pushed to a test group with a single user. What am I doing wrong? Thank you in advance!

[@IntuneTraining]

Which part is failing? Is it failing to install the scheduled task or is the script failing when the task runs? You should be able to check the logs from the install script to see where it’s failing. Also you can test by running your Powershell as System (psexec -i -s Powershell)

[@Zugetzu]

@@IntuneTraining There s no trace of the script deploying on the machine at all. There are no scheduled tasks created nor is there any PS logs. I tried a well known working script on intune and it worked fine though. I opened a ticket with MS sent them a copy of the script as well as the endpoint's MDM log files. I found good work around through AMDX ingestion instead. The script works normally when run locally on the endpoint.

[@SanTenBerg]

Thanks for this demo. Wish I found it earlier.

[@PaulDickson7]

Nice addition of event IDs :)

[@agfreelance]

much better content then anything Steve puts out

[@nbkst7b]

This is a great video, I wanted to check if we can have a video which shows how to use choclate app for app packaging

[@nbkst7b]

Also how can we move network drive to Azure file share.

[@Timmy-Hi5]

This is great tutorial, but in production with over 15000 endpoints, not sure about local end user experience :)

[@IntuneTraining]

In my own production environment I've had no issues from a user perspective. I've had less calls than when we had the traditional GPO map.

[@Timmy-Hi5]

@@IntuneTraining excellent 👌 good to know that. If the end user has the option to VPN into corp environment , do you need to change anything from your demo . Much appreciated your feedback 🌲🎅

[@BigFourHead]

can you input more than one security group.

[@IntuneTraining]

sure can. - Ben

[@Mkt6040]

The lack of option to provide username and password indicates that this script relies saved domain credentials. It can’t be used in a scenario where users and computers are fully cloud (Azure AD joined) but still need to map on premise server drive for a legacy application to run?

[@IntuneTraining]

Sure it can. Why would you think it can’t with with domain creds?

[@BigShactus]

@@IntuneTraining Hey there, I really love your Intune Training sessions! Through your Webinars, we were able to deploy our first AAD joined device :) We still have on-prem drives, which need to be mapped using our old AD configuration (OldDomainName\Username & Password (The Password is synched to AAD and should be the same)). I'm really new to coding, so I can't figure out, how to modify the script. Could you provide an "how to" on that? Best wishes from Germany. Just

[@daviddiepstraten5397]

@@BigShactus same here!

[@vincenthuynh5659]

great video. Are you able to let me know how you'd map it if it's azure joined devices and wanting to map a NAS location? where would permissions go? thanks

[@IntuneTraining]

As far as permissions go this uses your currently logged on creds. In this scenario I wouldn't suggest doing creds at all because you'd be storing them in plain text

[@vincenthuynh5659]

@@IntuneTraining thanks for that. That's what I thought and has been the issue since the beginning..

[@IntuneTraining]

@@vincenthuynh5659 I'm assuming it's for accessing on-prem resources and you have Hello for Business? If so take a look at docs.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base

[@codaamok]

Nice one

[@wnfaknd]

Good stuff!!

[@seancornelius5507]

AWESOME!

[@aranbillen5954]

Hey! Thanks for this although I cant get it to work! We use Azure AD accounts to log in to intune managed devices which are not linked to local ad accounts. Should this still pull down the mapped drive? I havent added in the extra code as users will always use mapped on prem. Any ideas where im going wrong? I have checked task schedular and can see that its there but not no mapped drive

[@IntuneTraining]

Check to see if the end users can access the UNC path manually before you try and use the solution. My bet is if the AAD account isn't linked to an AD account, then they probably don't have permission to the shares. -- Ben

[@aranbillen5954]

@@IntuneTraining Hey Ben, the user does have permission when using the path manually but has to type domain\localADuser to get in which is fine in our situation, can this be done via mapped drive

[@IntuneTraining]

Realistically you are trying to replicate AD perms to AAD accounts that aren't synced. Why not just sync them and do it properly? Sounds like you are trying to kludge a solution where a real fix exists if you just do it properly to begin with. -- Ben.

[@aranbillen5954]

@@IntuneTraining We want to go solely cloud based and these are only for a select few that need access to some .exes, there is probably a better solution to deploy this folder of exe's but i dont have a clue how aah sorry im a newbie to intune !

[@gregfranklin99]

A little late but a great video. How would I map a user's home drive without creating a custom script for each user? So for example \\server\share\home\Joeuser is one user. \\server\share\home\Jameuser is another user.

[@IntuneTraining]

This sounds like a terrible idea honestly. Have you considered moving your user’s data to OneDrive instead? If your machines are hybrid joined, just use User GPO like you would normally for home drive mapping.

[@gregfranklin99]

@@IntuneTraining Yes we have thought of OneDrive until we found out their retention policy is 3 months. Data needs to be kept forever now. Also, there are other shared departmental drives users share with each other.

[@IntuneTraining]

@@gregfranklin99 Hopefully you realize that 30 days is just the default retention period and that this is completely configurable in your tenant. docs.microsoft.com/en-us/onedrive/retention-and-deletion docs.microsoft.com/en-us/onedrive/set-retention As for department drives, move them to SharePoint and sync the SharePoint libraries. If you dismiss these options and not possible, you're just not looking at things properly. What you are proposing is counterintuitive to desktop modernization and data security best practices.

[@gregfranklin99]

@@IntuneTraining Thank you for the info, however the max retention looks to be 10 years, better than the 90 days I thought it was. I know Veeam has a forever retention, would rather stick to Microsoft though.

[@valonquar1]

@@IntuneTraining We have a use case in school PC labs where students use AutoCAD products. They don't always sit at the same station. In order to utilize OneDrive in this scenario, they would have to also click "Always keep on this device" before opening or it will crash. With a standard home share, it just works, with less user driven chances for failure. I would much rather push people to OneDrive\Sharepoint and this has been our last barrier. In the short term, it's still going to be home shares needed by that lab. So IS there a way to use this map tool with something like %homedrive% or is that going to create a persistent mapping for anyone that logs in after the first user? Also I am guessing this really only works for device assignment and not user assignment?

[@azgrm]

I'm not sure there's enough talking. Please consider a long format video. I use these to go to sleep at night and have come to depend on them.

[@EmilDanKreutzfeldtRasmussen]

Thanks for the great video. I tried but we use user drives where i took \\server\$users\%username% but that did not work. Any suggestion how I can pass %username% variable to the script?

[@IntuneTraining]

The easiest way would be to just map it to \\server\$user in this scenario I believe. I would avoid trying to put any kind of personal info into it.

[@EmilDanKreutzfeldtRasmussen]

@@IntuneTraining okay but how should the script know what $user is in that context?

[@IntuneTraining]

@@EmilDanKreutzfeldtRasmussen It uses the logged on creds when trying to map and auth to those drives

[@EmilDanKreutzfeldtRasmussen]

@@IntuneTraining Hmm.. I just tested it without uploading the script to Intune just by running the generated ps1 file as system and it didn't work i now use \\"server"\users$\$user because our user drive is in $users share. any suggestion?

[@nicolasuter2796]

Because it relies on PowerShell you need to specify the username variable like this: \\ds.nicolonsky.local\dfsroot\homes\$env:username (github.com/nicolonsky/IntuneDriveMapping/wiki )

[@johnchereson1639]

Hey guys, big fan of this series that you are doing. I'm new to Intune and have watched some of your videos (not in order) based on what I've needed to accomplish in my environment so far. In your second video you talk about deploying printer drivers through Windows Update for Business with Intune. I was wondering if you have another video that has covered this in depth and if you could point me in the right direction. If not, is this a topic you plan to cover in the future? I know another options is Universal Print but it's not available to everyone yet. Thanks for all your help so far!

[@DeepFriedLettuce]

If you have print servers, you can add the network path to the printer share on the print server as a configuration profile. Profile Type is Device Restrictions. There is a printer tab in Configuration Settings. If I recall correctly, you can specify the printer's network host name and it will try to find the printer on your network and install it.

[@andone3832]

@@DeepFriedLettuce I've already tested that, but unfortunately it doesn't work. A schedule task is created but the corresponding printers are not installed

[@DeepFriedLettuce]

@@andone3832 odd, we have this setup for about 260 users in our tenant and it has been working for us. We are, for better or worse, in a hybrid setup.