CA PAM Transparent login - RDP Drive Mapping, drive not being mapped.

Products

• CA Privileged Access Manager - Cloakware Password Authority (PA)
• CA Privileged Access Manager (PAM)

Issue/Introduction

RDP Drive Mapping has been configured in the Global Settings, however, when launching an RDP session with one or more drives selected for mounting the drives do not show up in My Computer/This PC.

When working properly each drive that was selected should appear and will look similar to this:

 

Environment

Privileged Access Manager, all versions

Cause

One possible cause of this is having Drive Redirection disabled on the Windows server (often as part of a group security policy). CA PAM requires Drive Redirection to be enabled on the target server for the drive mounting over RDP to work.

Resolution

Enable Drive Redirection for this server.

Server 2008 R2:

Open "Remote Desktop Session Host Configuration” > Properties > Client tab

Under Redirection, ensure "Drives" IS checked.



Server 2012\R2:

RDS > Session Collection > Properties > Tasks - Edit Properties > Client Settings > ensure "Drives" IS checked



GPO setting:

Computer Configuration\Policies\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Device and Resource Redirection


Do not allow drive redirection:  Disabled

Additional Information

If this was disabled in your environment it is likely due to security requirements. You may want to consult your Windows &/or Security Administrators before making this change.

The Drive Redirection setting may also effect the ability to use RDP Remote Application Transparent Login. The same drive mapping technology is used when launching the Transparent Login Agent and the Transparent Login will not work if Drive Redirection is not allowed.