[ansible-project] Re: Windows mapped drives – what the hell is going on?

1) What is the full command you run to map the drive normally (outside of
Ansible)?
- net use z:  \\bellagio.intra.vegas.net\how\the\hell\to\solve\this\issue
/persistent:yes'
2) If you manually map it through the GUI are you connecting with explicit
credentials?
- I'm connecting using mRemote, RDP protocol with the same credentials as
configured in Ansible:
username:elvis ; domain:bellagio ; password:elvis123

3)

a) after mapping via Ansible, nonAdministrator:
PS C:\Users\elvis> cmdkey.exe /list

Currently stored credentials:

Target: MicrosoftAccount:target=SSO_POP_Device
Type: Generic
User: 02yahgcuuqfcntfq
Saved for this logon only

Target: WindowsLive:target=virtualapp/didlogical
Type: Generic
User: 02yahgcuuqfcntfq
Local machine persistence

b) after mapping via Ansible, Administrator:
PS C:\Windows\system32> cmdkey.exe /list

Currently stored credentials:

Target: MicrosoftAccount:target=SSO_POP_Device
Type: Generic
User: 02yahgcuuqfcntfq
Saved for this logon only

Target: WindowsLive:target=virtualapp/didlogical
Type: Generic
User: 02yahgcuuqfcntfq
Local machine persistence

c) after manual map, nonAdministrator:
PS C:\Users\elvis> cmdkey.exe /list

Currently stored credentials:

Target: MicrosoftAccount:target=SSO_POP_Device
Type: Generic
User: 02yahgcuuqfcntfq
Saved for this logon only

Target: WindowsLive:target=virtualapp/didlogical
Type: Generic
User: 02yahgcuuqfcntfq
Local machine persistence

On Wednesday, January 15, 2020 at 12:25:46 PM UTC+1, Jordan Borean wrote:

> That is very curious, typically the opposite is the case where the
> standard (limited) process is able to see the mapped drive but the admin
> process is not. We can see that in both scenarios net use can see that
> there is a valid configuration for the mapped drive but it is only
> successfully connecting under the administrative process. We can also see
> that the registry settings are exactly the same compared to when you map it
> manually and when Ansible does it for you.
>
> This pretty much means there's some sort of credential/authentication
> issue that occurs with your limited process compared to the admin process.
>
>    - What is the full command you run to map the drive normally (outside
>    of Ansible).
>    - If you manually map it through the GUI are you connecting with
>    explicit credentials?
>    - When you map it manually and there is a mapped drive in the GUI,
>    what is the output for 'cmdkey.exe /list', is there an entry for '
>    bellagio.intra.vegas.net'?
>
> If the answer to the last 2 (or even 1) is with an explicit credential you
> will have to do the same thing with Ansible with the win_credential module.
> Having a credential present for the server specified will mean that
> credential is used for outbound authentication.
>
> Thanks
>
> Jordan
>

--
You received this message because you are subscribed to the Google Groups
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to ansible-project+unsubscr...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/ansible-project/b171ef85-9aa6-4c98-b4df-71f8bd71b610%40googlegroups.com.