Intune deploy a network drive to an Azure AD joined Computer

Question

Intune deploy a network drive to an Azure AD joined Computer

Anonymous

Hi all, yes i know there are multiple guides etc but none of them work.

I've tried:
The scheduled task creation and run when a user is loggin in => no succes
Powershell script to map them (https://intunedrivemapping.azurewebsites.net)
Simple stupid thing: New-PSDrive –Name T –PSProvider FileSystem –Root “\fileserver.Whygodwhy.com\TEST” –Persist
the custom URI one with the ADMX ingestion

But it seems when a thing is deployed to a user via Intune it can't do this.

Anybody got an idea?

Crystal-MSFT 53,981 Reputation points Microsoft External Staff

2022-09-23T01:10:46.89+00:00
@Anonymous , Thanks for posting in Q&A.

To clarify our issue, I would like to collect the following information:

Was the mapped network drive authenticated with a domain account or an Azure AD account?

For the script, how did we configure "Run the script using the logged on credentials"?

For the script, if we run manually on the device, can the mapped drive be added silently?

Please collect the above information and if there's any question, feel free to let us know.
Anonymous

2022-09-26T13:16:16.003+00:00
Hi Crystal,

The drive mapping authentication is done via a domain account.

Both ways, result stayed the same

The simple script, the mapping works then.

Accepted answer

3 additional answers

Your answer

Crystal-MSFT 53,981 Reputation points Microsoft External Staff

2022-09-23T01:10:46.89+00:00

@Anonymous , Thanks for posting in Q&A.

To clarify our issue, I would like to collect the following information:

Was the mapped network drive authenticated with a domain account or an Azure AD account?

For the script, how did we configure "Run the script using the logged on credentials"?

For the script, if we run manually on the device, can the mapped drive be added silently?

Please collect the above information and if there's any question, feel free to let us know.
Anonymous

2022-09-26T13:16:16.003+00:00

Hi Crystal,

The drive mapping authentication is done via a domain account.

Both ways, result stayed the same

The simple script, the mapping works then.

Answer 1

Crystal-MSFT 53,981 Microsoft External Staff

@Anonymous , Thanks for your update. I am glad that the network drive mapping is working. And thanks for sharing your solution. To help others who has the same issue, Here, please let me write a brief summary:

Issue Description:

===========================

Map a on-premise domain network drive on Azure AD join device

Solution:

===========================

Import the Drive mapping ADMX and ADML file.
Import ADMX in Intune.
Create a device configuration profile under "Imported Administrative template(Preview), select the drive letter to configure the remote math.
Connect VPN to intranet and the drive can be accessible.

Reference link:

=======================

https://call4cloud.nl/2021/03/willy-wonka-and-the-drive-letter-factory/
Note: Non-Microsoft link, just for the reference.

Thanks for your time and have a nice day!

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

BC 0 Reputation points

2023-03-31T02:14:37.08+00:00

Hey just on this if you are using AAD Join machines remember you can't use DFS shares so you have to map directly to the server name. (Unless some one has a fix for this)
Rishbha Parakh 0 Reputation points

2023-06-16T05:24:53.17+00:00

I have mapped network drive using the above method. and it worked but to do a test I have disconnected the mapped drive manually and synced the policy and device again but now its not getting mapped via policy. any suggestions?
Timmothy Green 5 Reputation points

2023-06-29T20:21:44.95+00:00

The ProviderFlags = 1 should allow DFS shares to map. I'm using a different ADMX from https://www.anoopcnair.com/managing-network-drive-mappings-with-intune/. That one uses a Drive_X_RemotePath_IsDFS property but the end result it sets ProviderFlags to 1 for that mapping. Maps DFS shares in my environment just fine.

Answer 2

Pavel yannara Mirochnitchenko 13,336 MVP

Tried to upload admx and adml templates to Intune from link in the anwer post, but it fails. Any ideas?

User's image

Robert Ceneskie 25 Reputation points

2023-10-26T15:03:48.7166667+00:00

Pavel,

Delete the DriveMapping.admx that you uploaded, upload the Windows.admx and Windows.adml from C:\Windows\PolicyDefinitions, and once that shows as available then try uploading the DriveMapping.admx and DriveMapping.adml again.

I got the same error when trying to upload the NetSupport ADMX files and they had a note that said add the Windows ADMX files first and it worked after that.

Thanks,

Robert
Pavel yannara Mirochnitchenko 13,336 Reputation points MVP

2023-10-31T08:44:05.4433333+00:00

Nice one, let me try!
Maddie Stich 5 Reputation points

2023-11-27T16:11:53.64+00:00

Did that end up fixing this? looking to maybe implement this and want to make sure this won't be a problem
Jason Nash 0 Reputation points

2023-12-21T16:07:49.5466667+00:00

@Maddie Stich Importing the Windows ADMX first worked for me. I was then able to import the DrivMapping ADMX. I can see the policies available to set however I have yet to test them.

Answer 3

Crystal-MSFT 53,981 Microsoft External Staff

@Anonymous , Thanks for your update. From your description, I know we map the drive using domain account. As we will login Azure AD joined device using Azure AD account or system account. But these credential can't be used to map drive. So it is failed.

Based on my research, maybe you can try to add the domain credential into the map drive command to make it works. here is a link I find for your reference:
https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.management/new-psdrive?view=powershell-7.2#example-4-create-a-persistent-mapped-network-drive-using-credentials

Hope it can help.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Anonymous

2022-09-27T11:49:18.507+00:00
Hi Crystal: I've found a way to do it (not an MS source) but it works: https://call4cloud.nl/2021/03/willy-wonka-and-the-drive-letter-factory/

What you need to do from this guide are steps:

Drive Letter ADMX
1.1 Intune Import ADMX
2.1 Imported Administrative Templates

You can then deploy this even to a Device collection and the drive will map (tested on a AAD Joined devices) outside the company network.
The network drives will map, but of course, with a disconnected red X.
Make a VPN connection to the HQ and presto the drive is accessible.

All the rest in the link are nice to haves but everything works file if you create the M365 Security groups in AAD and assign them to the drive letter mapping.

Kind regards,

Tom

Answer 4

Joao Guimaraes 0

@Crystal-MSFT I've being using this solution but I dont know if Microsoft updated but it stopped working.

Solution:

===========================

Import the Drive mapping ADMX and ADML file.
Import ADMX in Intune.
Create a device configuration profile under "Imported Administrative template(Preview), select the drive letter to configure the remote math.
Connect VPN to intranet and the drive can be accessible.

someone with the same problem?

Thanks

Share via

Intune deploy a network drive to an Azure AD joined Computer

3 additional answers

Your answer