I'm trying to block removable storage devices on some user accounts through group policy called Removable Storage Access in windows windows server 2012 r2. (User Configuration\Administrative Templates\System\Removable Storage Access\All Removable Storage classes: Deny all access). I tried to apply this policy to user accounts however it didn't work in Windows 8.1 pro but perfectly work in windows 7, I also check that the policy was applied in win 8 pro pc (gpresult).

Hope i will find the correct solution.

Thanks

Hello Sunath Sarkar,

Do you mean that the group policy not work in Windows 8.1 pro?
And the gpresult shows that the policy is applied in Windows 8 but not in Windows 8.1?

Based on my test, if I enable the policy User Configuration\Administrative Templates\System\Removable Storage Access\All Removable Storage classes: Deny all access, the registry key HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\RemovableStorageDevices\Deny_All is set to 1.

Please check if the registry key is changed in Windows 8 and Windows 8.1.

Additionallyplease try to use Computer Configuration instead of User Configuration.

Best regards,
Fangzhou CHEN

Hi Fangzhou CHEN,

Thanks for your replies, I was checked the registry key and found this

Key Name:          HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\RemovableStorageDevices
Class Name:        <NO CLASS>
Last Write Time:   30-03-2015 - 15:25
Value 0
  Name:            Deny_All
  Type:            REG_DWORD
  Data:            0x1

but till system can access all removable storage device read/write mode, i don't understand what cause it was happen in windows 8.1. 

In my scenario  use Computer Configuration instead of User Configuration not possible because multiple users use one PC in domain environment and i set policy to Windows 2012 R2 dc.

Thanks & Regards

Sunath Sarkar

 

• Edited by Sunath Sarkar 21 hours 13 minutes ago