Hi, we have couple workgroup windows 7 computers. We want prevent one of users to access to removable devices on the computers. other users should be able to access removable devices, what is the best way to accomplish this? thanks, aurimas

Hi Aurimas The best way to do this is probably by creating a local group policy for that user, or if you were to have more than one user then create a local group and add the users to it, create a policy for the group. Windows 7 provides support for applying different local GPOs per user. Follow the below to create the GPO: Open an MMC (start > Run or Start > type MMC) Add/Remove Snap-in Select Group Policy Object Editor You will be prompted to select the GPO object - Under User Tab - Select the user or group that you want to restrict access Navigate to User Configuration > Administrative Templates > System > Removable Storage Access Here you have several options to restrict removable devices

Hi, By modifying Group Policy Object, it may deny all users to access removable devices or allow all users to access devices. Alternatively, I suggest you turn on BitLocker To Go on certain removable devices and share the password to the users who you would like to give. Then, when the users would like to access the encrypted drive, they can type the password and access it. The other user will not access it since they do not have the password. For more information about BitLocker To Go, please refer to the link below: Windows 7 Walkthrough: BitLocker and BitLocker to Go Thanks, Novak

Novak, it seems that Stumyster007 is right, we can deny access to removable disk by user, thanks, aurimas