GPO for Removable Drives Can't Reverse Settings
I created a GPO on a 2008 R2 server to test locking down USB and CD\DVD ROM drives (removable storage) and those settings took. Then I tried to change everything back to Not Configured and reboot the machine a few times as well as gpupdate /force but still can't access the DVD drive nor the USB drive. Initially I had disabled this GPO thinking that would change everything back, but after reading up a little on this I see that's not how to do it. You need to change the settings in the GPO and then make sure they take first (keep it enabled). But why won't they take now? I changed everything back to Not Configured... Also getting Access Denied.
June 16th, 2011 4:40pm

It sounds like the settings have become "tattooed". You may need to delete the registry values or keys. I would back up the workstation before deleting anything in the registry. You can identify the registry keys from this reference http://www.microsoft.com/downloads/en/details.aspx?FamilyID=18c90c80-8b0a-4906-a4f5-ff24cc2030fb
Free Windows Admin Tool Kit Click here and download it now
June 16th, 2011 5:43pm

It sounds like the settings have become "tattooed". You may need to delete the registry values or keys. I would back up the workstation before deleting anything in the registry. You can identify the registry keys from this reference http://www.microsoft.com/downloads/en/details.aspx?FamilyID=18c90c80-8b0a-4906-a4f5-ff24cc2030fb
June 16th, 2011 5:44pm

It sounds like the settings have become "tattooed". You may need to delete the registry values or keys. I would back up the workstation before deleting anything in the registry. You can identify the registry keys from this reference http://www.microsoft.com/downloads/en/details.aspx?FamilyID=18c90c80-8b0a-4906-a4f5-ff24cc2030fb
Free Windows Admin Tool Kit Click here and download it now
June 17th, 2011 12:42am

Hi MarcGel, Thank you for your post. Good question. When you change policy back to "Not Configured", it just send "not override" policy to the clients. So the clients keep the policy status "disabled". The solution is configure its value as before--set policy to "enabled" for some time to ensure each client receive this setting. Then change policy back to "Not Configured". Please refer to KB286251 for example. If there are more inquiries on this issue, please feel free to let us know.Regards, Rick Tan
June 17th, 2011 3:34am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics