Hi recently we applied a group policy for blocking on windows 2008 the usb drives. it worked perfectly, however wseveral months later the administrator of the server cant acces neither the usb drive or the cd, i have checked alll of the pilicies and registry settings. is there som kind of program that will tellme wich is the policy or setting that is not letting me access the drives? the drives show on explorer but when i try to acces them i get acces denied. Thanks a lot for your help

Hi, Would you please describe how did you configure and apply the GPO to block accessing to removable devices in detail? What policies are set under Computer Configuration\Administrative Templates\System\Removable Storage Access and User Configuration\Administrative Templates\System\Removable Storage Access? Please send me more information for analyzing. For your convenience, I have created a workspace for you. You can upload the information files to the following link. (Please choose "Send Files to Microsoft") Workspace URL: https://sftasia.one.microsoft.com/choosetransfer.aspx?key=071f407f-9cf7-44f2-b091-557be288a93a Password: @53c%0@#zT@0S Note: Due to differences in text formatting with various email clients, the workspace link above may appear to be broken. Please be sure to include all text between '(' and ')' when typing or copying the workspace link into your browser. Meanwhile, please note that files uploaded for more than 72 hours will be deleted automatically. Please ensure to notify me timely after you have uploaded the files. Thank you for your understanding. Collect GPMC log ============== 1. On domain controller, click Start -> Run, type GPMC.MSC, it will load the GPMC console. If the GPMC snap-in is not installed. 2. Right click on "Group Policy Result" and choose wizard to generate a report for the problematic computer and user account (please place appropriately). (Choose computer and select the proper user in the wizard) 3. Right click the resulting group policy result and click the "Save Report…" => save report and upload it to the link I provided. For more information, please also refer to the following Microsoft articles: Control Read or Write Access to Removable Devices or Media http://technet.microsoft.com/en-us/library/cc730808(v=WS.10).aspx HOWTO: Use Group Policy to disable USB, CD-ROM, Floppy Disk and LS-120 drivers http://support.microsoft.com/kb/555324 Disable Adding USB Drive and Memory Sticks via Group Policy and Group Policy Preferences http://blogs.technet.com/b/danstolts/archive/2009/01/21/disable-adding-usb-drive-and-memory-sticks-via-group-policy-and-group-policy-preferences.aspx Regards,Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

hi i-ve sent you all the required info, when you check you-ll se that the cd drives are enabled. i was testing this so i dont enable usb to everyone. but anyhow i cant acces the cd. the policys are structured this way. default domain rstricts the devices and default domain controllers enables them for the domain controllers. i chose that domain controllers would not apply the default domain policy to themselves. if you need any additinal info let me know. The files i sent you are on spanish if you neeed any translation let me now. Thanks a lot for your help.

Hi, Unfortunately, I don’t know Spanish. Based on the current situation, please submit a new question to Windows Server Spanish Forum which is the best resource for further research. Regards,Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.