This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(313.6, 12%, 40%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EY%3C/text%3E%3C/svg%3E)
Hello, I would like to use GPO control group policy to prohibit -- > removable disk: deny read permission
This is my code, but can't disable removable disks. Is there a problem with the code? There is no better way. It's invalid to modify the registry directly. I took a snapshot of the registry according to the historical records. After restarting the computer, I found that the value of a key changed and could not be controlled
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(268.8, 45%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EC%3C/text%3E%3C/svg%3E)
Your code uses GPO_SECTION_USER instead of GPO_SECTION_MACHINE. Please change, run and reboot (you don't have code to enforce policy) to check if it works.
Thank you. I have corrected it. Maybe there's something wrong with my method. After execution, the removable disk is not disabled, and the "removable disk: deny read permission" item in gpedit.msc is not enabled
Open the key location with RegEdit.exe and see if the key is created successfully or not. This will help determine the nature of problem.
Also, I assume you're not using "Home" version of Windows and have "Group Policy Client (gpsvc)" Windows Service running, as these are the requirement for GPO to work.
Good idea. Thank you for your advice. I'll give it a try
I use the win10 professional version, should not appear GPO does not work
I found the reason, I sent the wrong parameter...
'status = pGPO->Save(FALSE, TRUE, &Registerid, &ThisGuid);' Change to 'status = pgpo - > Save (TRUE, TRUE, & registerid, & thisguid);' The 'Save' method also distinguishes' GPO_ SECTION_ USER' and 'GPO_ SECTION_ MACHINE ', I use 'GPO_ SECTION_ Machine ', so need to use ' TRUE' in 'Save' method
Good day ypf-3939,
This forum system is for discussions in English.
For support in CHINESE you can search for CHINESE forum in the old MSDN forums.
A better option is to write in English if you can
Thanks