Netzwerklaufwerk per Script verbinden

To enhance the security of your batch script for mapping network drives without storing the password in plaintext, you can use the following approaches:

### Approach 1: Using Windows Credential Manager

1. **Store the Credentials in the Windows Credential Manager:**
   - Open the Credential Manager from the Control Panel or search for "Credential Manager" in the start menu.  
   - Add a Windows Credential for the network location. Provide the network address (e.g., `\\192.168.0.75`), the username, and the password.

2. **Modify Your Script:**
   - Update your script to use the stored credentials. The Credential Manager will automatically use the stored password when you specify the username.

Here's how you can modify your script:  

```batch
@echo off
net use * /delete /yes
net use L: \\192.168.0.75\daten_1 /user:XX /persistent:no
net use M: \\192.168.0.75\daten_2 /user:XX /persistent:no
exit
```

### Approach 2: Using a Secure Encrypted Password File

1. **Create an Encrypted Password File:**
   - Use PowerShell to create an encrypted password file that only your user account can decrypt.

   ```powershell
   $Password = Read-Host -AsSecureString
   $Password | ConvertFrom-SecureString | Out-File "C:\path\to\password.txt"  
   ```

2. **Modify Your Script to Use the Encrypted Password:**
   - Use PowerShell within your batch script to read the encrypted password file and map the network drives.

Here's an example of the updated script:  

```batch
@echo off
net use * /delete /yes

rem Use PowerShell to decrypt the password and store it in a variable
for /f "delims=" %%i in ('powershell -command "Get-Content 'C:\path\to\password.txt' | ConvertTo-SecureString | ConvertFrom-SecureString -AsPlainText"') do set MyPassword=%%i  

rem Map the network drives using the decrypted password
net use L: \\192.168.0.75\daten_1 /user:XX %MyPassword% /persistent:no
net use M: \\192.168.0.75\daten_2 /user:XX %MyPassword% /persistent:no

exit
```

### Approach 3: Using Group Policy Preferences

1. **Create a Group Policy Object:**
   - Open the Group Policy Management Console (gpmc.msc).
   - Create a new Group Policy Object (GPO) or edit an existing one.

2. **Configure Drive Mapping:**
   - Navigate to `User Configuration -> Preferences -> Windows Settings -> Drive Maps`.
   - Create a new drive map entry for each network drive.
   - Set the action to "Create", specify the drive letter, and provide the path to the network location.  
   - Under the "Common" tab, you can configure item-level targeting to apply the drive mapping to specific users or groups.  

By using Group Policy Preferences, you can manage network drive mappings centrally without exposing passwords in scripts.

### Summary

Using Windows Credential Manager or creating an encrypted password file with PowerShell are practical methods to avoid storing plaintext passwords in your batch script. Alternatively, for a more centralized approach, using Group Policy Preferences can help manage drive mappings securely within a domain environment.