This is not an Enterprise Technical Support forum BTW
Cannot block removeable storage access
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Anonymous
I'm having no success blocking access to removable storage for one of our domain's AD security groups.
The setting for our Default Domain Policy is left unconfigured--that is, User Configuration > Administrative Templates > System > Removable Storage Access: All Removable Storage classes: Deny all access I've created a separate gpo Deny Removeable Access that sets that option to Enabled, and under the Scope tab, I've removed Authenticated Users under Security Filtering and added in the corresponding AD security group.
But I log onto a laptop on our domain, with a user account in the appropriate AD group, and still have access to USB drives. I've restarted the computer several times, running gpupdate /force as an admin (logged in as the domain admin and running CMD as an admin), and even connecting hardline instead of just wireless to our network. I logged on as the test account and used gpresult /vto make sure that security group is listed for it.
Not sure where I'm going wrong. From what I understand, if I alter the GPO to be under Computer Configuration and not User, it would do it for all computers, regardless of who's logged on--and that's not what I want. I want a particular security group's members to be blocked no matter what domain computer they're on. Any suggestions?
Windows for home | Windows 10 | Security and privacy
Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.
Answer accepted by question author
Anonymous
2 additional answers
Sort by: Most helpful
-
Anonymous
2021-01-21T18:23:09+00:00 Got it thanks!
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(89.60000000000001, 18%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJD%3C/text%3E%3C/svg%3E)
John DeV 164.9K Reputation points Independent Advisor2021-01-21T18:20:16+00:00 Hello R Glon,
I'm John an Independent Advisor and a Microsoft user like you. I'll be happy to assist you today.
I want to apologize that this is just a consumer forum. Due to the scope of your question, I recommend posting your query on our sister forum Microsoft Site QA which is a technical community platform where most of the members were IT professionals that would greatly help you with the issue. They have IT experts there that can assist you better especially about Windows Servers, Active Directory and Group Policy configurations, etc.
Microsoft Site QA
https://docs.microsoft.com/en-us/answers/products/
Sincerely,
John DeV
Independent Advisor