GPO: CD and DVD: deny write access prevents the user to use their USB Pen drive, but other users or ok

My users have secure readers Pen who throw a CDROM partition with a secure logon application that decrypts the key to mass storage USB the USB on successful logon. The problem I have is that users who install the USB cannot initialize then the app launcher CDROM to enter their password to access the element of the rendering it useless USB mass storage.

However, any user who has the same type of USB key that plugs in to the endpoint that has already installed the drivers is able to access their own USB or the other users of USB stick (knowledge by providing the password).

So I've isolated the problem being down to the presence of the GPO setting shown above on the removable storage access policy and by not having not this policy in place when a user installs the USB key, they have no problems, but I can't find a way to clean a user that is already broken, even if I delete the GPO from this user , remove their local profile so that they start as a new user (no roaming or other data) and use a variety of utilities such as USBOblivion to clear the registry and the file system of the USB and installation. When the original user logs back and then installs the USB again, they have the same problem, but no one else does. I have the same problem if I try with another user or administrator as the first user after "clean it up". Everyone can use the pen drive except the user who originally installed when the GPO was in place.

If I move the user to a new endpoint or rebuild their end point, then they have no problem being the USB setup and then use it because the GPO has been deleted, so what I need to know, that's what he's talking about installing USB and the GPO which is tattooed somewhere in Windows and how can I remove it?

Hello

Welcome to the Microsoft community.

I suggest you post this query on the TechNet forums.

You can refer a link below to send this request.

https://social.technet.Microsoft.com/forums/en-us/home?category=w7itpro&filter=AllTypes&sort=lastpostdesc

Let us know if you have a Windows problem, we will be happy to help you.

Tags: Windows

Similar Questions

  • Error - "Launcher requires the write permission for World of Warcraft key to locate and launch the game successfully. Please turn on write access to the registry key with the help of an administrator account"

    Original title - edit registry of the world of Warcraft Launcher to write

    I downloaded the patch more recent game in my computer, I did a cleanup of the system and tried to log in again, but now the States window it "(Launcher requires permission in writing for World of Warcraft key to locate and launch the game successfully." Please allow write access to the registry key by using an administrator account)", how can I access the registry to resolve this problem? Help please

    Hello DaTurtle !

    I had exactly the same problem, I have not found the sollution here...

    But I found how to fix very easy !

    You do a right click on the WOW icon at the office-
    then browse to the location of the file -
    It will appear a lot of files-
    Click on the WoW program file instead of the pitcher-
    will start your wow game-
    Log in as normal-
    then he will come to the top to update...

    After the update your wow will work as usual!

    It worked on my computer, please respond!

    Hans_Craft

  • Labview that is running on a computer without write access to the installation directory?

    Hello

    A client of ours wondered if we can run our Labview executable and runtime on their computer without having no write access to the installation directory?

    It is quite easy to change so that our program writes its log files to another drive on the network, but what the runtime engine and updates Live trying to download programs OR?

    Grateful for any comments.

    As far as I know the terms of access rights for the updates are the same for the basic facilities.

    However, given that your program is running on a factory floor, I recommend disabling updates. I don't think you want to come down because a computer does not have an assembly line update.

  • How to prevent the user to create the 'analysis' and 'dashboard '?

    We have a requirement that is to restrict the user create new 'analysis' and 'dashboard '. As we know when the connection ' host: port / analytical, in the top of the page there is a drop down list of 'New' where users can create new 'analysis' and 'Dashboard', how to set up the privilege to disable the option 'Analysis' and 'dashboard '?

    OBIEE version: Oracle Business Intelligence 11.1.1.7.0

    Thank you
    Jinbo

    Summary:

    1 set the "New Menu" permission in the 'home page and Header' refusal, then the 'New' menu will disappear from the top right of the page, which prevents the user to create dashboards and new anlysis

    2. in order to not allow the user to modify the catalog, set the permission of "access user interface of the catalogue"in the ' welcome and header' to refuse."

    3. even made 1 and 2, we have always have a path that the user can create new report, it's "House"menu." To avoid this, our method is to set the explicit right to catalog for the application role.

    Thank you
    Jinbo

  • Get write access to the VI API to allow stopping a server ESXi via Toolkit VI

    Shutdown, APC by 3i

    Referring to the above link and more precisely the following statement ' VMware ESXi 3.5u4 has just been launched and the internal API seems to have been fixed and exposed VI API will have only read-only access when you use the version of ESXi license.

    I did some playing with 3.5u4 ESXi and use the VI Toolkit to connect to the host of 3i. I have been unable to stop the ESXi host as it gives me the error "fault. RestrictedVersion.summary ".

    I understand the question (see this link fault. RestrictedVersion.summary).

    My question is how can I pay for that to work (which agents do I need to buy).

    In my scenario (small client under 15 users), I have a server terminal server in physics and I want to implement SBS on a box of 3i. I want to be able to issue a stop command to the area of 3i of the terminal server using the VI toolkit.

    So I'm able to buy an agent / license to allow write access to the API?

    My first thoughts were:

    • I need to purchase a license to host VirtualCenter for this box of 3i.

    • Then, he would be more free and I was able to 'write' API?

    • I guess on the SBS box, I wouldn't need to install virtual center, just the license service so I got somewhere to point the box of 3i in a location of license

    • VirtualCenter can be provided as a serial number or the host license?

    Any ideas or suggestions?

    I like the VI Toolkit to be able to issue the shutdown command, in turn will stop the VM guest for me.

    At least you need the Foundation license which includes vCenter. Which will give you full access r/w to the VI API, this limited restriction applies only to the free version of ESXi, you are aware of.

    This KB provides details on the type of license required for full access in RCLI: http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1006543

    =========================================================================

    William Lam

    VMware vExpert 2009

    Scripts for VMware ESX/ESXi and resources at: http://engineering.ucsb.edu/~duonglt/vmware/

    http://Twitter.com/lamw

  • Why do need write access to the Java installation directory

    We are upgrading of Siebel Analytics 7.8 to OBIEE 10.1.3.4.
    As OBIEE requires Java 1.5 or higher as a prerequisite, we plan to uninstall Java 1.4 and install the latest version of Java 1.5.
    According to OLIVIER Installation and Configuration Guide http://download.oracle.com/docs/cd/E10415_01/doc/bi.1013/b31765.pdf-> Page 39 "If you install by using the basic installation type, make the user or user group permissions.
    writable for the user who installs Oracle Business Intelligence for all JDK 1.5.0 installation directories,.
    subdirectories and files. Can someone let me know why we need write access to the directory to install Java?

    Thank you
    Chandra

    Published by: user6086408 on April 5, 2010 15:07

    I had this same issue and asked Oracle. Here's what they told me:

    By Dev:

    «For presentation of OBI and OBI Publisher Services, the jdk font files are copied to the location of the JDK because we do not bundle our own JDK.» To ensure that the installation can do this, you must make sure the Oracle BI Installer has permissions to copy files to the location specified in the JDK.

    This means that if the same user that Installer / decompressed JDK is also installing Oracle BI, installation should work. In this case the permissions of the JDK is probably 755.

    This will not work if a root user installs JDK and a normal user installs Oracle BI because the normal user has not access to write to the location of the JDK or will not work if the location of JDK is read-only, i.e. 444. In this case running chmod 777-r will work. »

    Jerry

  • Is there a way to give a user access to the users and computers active directory, without being an administrator

    I want to be able to allow user group to be able to reset passwords and create accounts in an organizational unit.  I delegate control of the organizational unit for the group, but if I connect to the domain controller and try opening users and computers active directory, we wonder an administrator password.  I have a mix of two domain controllers Server 2003 and a Server 2008 DC.  Is there a way to give a group access to the users and computers active directory without being administrator?

    For assistance, please ask for help in the appropriate Microsoft TechNet Windows Server Forum.

    Thank you.

  • How can I download the drivers for a processor that crashed and does not have access to the internet

    How can I download the drivers for a processor that crashed and does not have access to the internet.  The drivers seem to be the problem.

    How can I download the drivers for a processor that crashed and does not have access to the internet.  The drivers seem to be the problem.

    First of all, please note that you mean a computer, not a cpu.  "CPU" means "Central processing unit". In modern personal computers, the CPU is a relatively small chip, an integrated circuit. It is located on the motherboard inside the computer case. It is not the case itself, nor is it the total computer, which includes the case and what it contains.

    Download drivers on another computer and put them on CD or thumb. Bring them to the computer in question, and then copy them there.

  • Win 7 Pro - make a name of user and password request when accessing to the server computer in the workgroup. Credentials, then considered non valid.

    Recently bought a Dell Dimension 3847 with Windows 7 Pro to replace a workstation that is connected to a network that uses Windows Server 2003. I already set up two other PC's (not same model) with Win 7 Pro, for existing users and had no problems whatsoever. The user of this workstation is an existing one (implemented as an administrator).  I've set up his account and she joined the working group. The other computers in the workgroup are listed under network location. However, when I tried to access the server computer in the Working Group, I got a pop-up window asking for a username and password. This would not have taken place. However, I entered the username and password for that particular user and received a message that the user name and password were not valid. I set up my user account (it has administrative privileges too), on this computer, joined the Working Group, Windows recognizes the other computers in the workgroup, but when I tried to access the server computer I got the same pop-up and had the same problem with my credentials not being recognized. While remaining under my user name, I tried and then access the server computer again but when I arrived at the prompt for the user name and password, I used the 'Administrator' user name with the appropriate password (the credentials used to connect to the server computer) and it worked. I registered to the account of the other user and used the same method to access the server and it worked as well. Any ideas why the user credentials, other than the administrator account, are not recognized?

    Hello

    Sorry for the late reply.

    This problem is better suited in the TechNet forum where we have experts working on the same topic.

    Please post your request in the below link:

    https://social.technet.Microsoft.com/forums/en-us/home

    I hope this information helps, get back to us if you need help with Windows.

    Thank you.

  • Group Policy to clear the MRU lists and to clear or to prevent the login information of the user for such programs as being registered remote desktop

    Hello

    Please someone can instruct me on how to implement Group Policy to clear the MRU lists and to clear or to prevent the login information of the user for such programs as being registered remote desktop. Your help would be much appreciated.

    Kind regards

    RocknRollTim

    Hi Tim,.

    Please contact Microsoft Community.

    I understand that you want to prevent the user details stored connection and deletes automatically the most recently used (MRU) list. To help you better ask you to answer the following questions:

    Your computer is connected to the domain?

    Please see the configuration group policies section below.

    http://TechNet.Microsoft.com/en-us/library/bb742376.aspx

    If the problem persists, thanks for posting the same question in the Microsoft TechNet forum for assistance.

    https://social.technet.Microsoft.com/forums/en-us/home

    Hope this information helps. Response with status so that we can help you.

  • How to deny access to the user control panel?

    A PC running under that Windows 7 is used by several users, I connect PC as an administrator and try to change the policy to prohibit access for the user in the control panel.

    But I can't find a way to block certain users access to the control panel.

    I don't know other users information to connect.

    Is it possible to block some users access to the control panel at the same time of admin account?

    Advice me please.

    A PC running under that Windows 7 is used by several users, I connect PC as an administrator and try to change the policy to prohibit access for the user in the control panel.

    But I can't find a way to block certain users access to the control panel.

    I don't know other users information to connect.

    Is it possible to block some users access to the control panel at the same time of admin account?

    Advice me please.

    You can use Group Policy prohibit access to the control panel...

    http://answers.Microsoft.com/en-us/Windows/Forum/Windows_7-Security/Windows-7-options-for-standard-user-account/07c1084b-B65F-4b33-8579-1749ca661ded

    its for all users this grouppolicy is enabled

  • prevent the user to change the color of report and highlight

    I used 5 APEX

    After matches the report as shown below


    I need prevent the user to change or remove the color & saved report

    Concerning

    Hello Rara,

    I don't know if there is an option how to remove just cancel 'X' button/image filter defined/facts highlights. Maybe some gurus should help.

    You can remove just 'X' next to point culminating with inspect the attributes of the button and set the attribute for visibility for it.

    In my case:

    button[data-highlight-id] {
        visibility: hidden !important;
    }
    

    You can see the demo on:

    https://Apex.Oracle.com/pls/Apex/f?p=16502:

    Demo/demo

    TAB: Refresh IR 5.0 Plugin

    Concerning

    J

  • Hello. I bought creative suite and it downloaded on my computer, however, a few days my computer crashed and I got of him having wiped, and so I lost access to the creative suite. I was wondering if there is a way I can re - download the NICU programs

    Hello. I bought creative suite and it downloaded on my computer, however, a few days my computer crashed and I got of him having wiped, and so I lost access to the creative suite. I was wondering if there is a way I can re - download programs using my serial number?

    Other downloads

  • How to prevent the user open and play a flash game on multiple browser windows at the same time?

    Hi guys,.

    I made a game as the same site: http://www.Netent.com/games/table-games/Texas-Holdem-Pro-series/

    Anyone know how to prevent the user opened and play the game on multiple windows browser both?

    I used the command of flash to embed flash into a page aspx and connection to sql server

    Someone help me, please.

    p/s: Sorry, my English is not good

    You can use localconnection.

  • Prevent the user from changing the page in URL - Apex 5

    Dear community of Apex,

    We seek to protect our handling of URL pages.  The protection of session state is enabled, and each page has page value «Arguments must have Checksum» access protection  However, the documentation seems to discuss in order to prevent the user from element values in the URL.  We want to prevent the user to change the page ID in the URL.  Currently, a user is able to hack the URL and take in the middle of a wizard process for example.  Is it possible to stop this?  Other that an element of creative previous train stop check.

    * Version: Application Express 5.0.1.00.06

    Thank you

    Barry

    bSamuel wrote:

    We seek to protect our handling of URL pages.  The protection of session state is enabled, and each page has page value «Arguments must have Checksum» access protection  However, the documentation seems to discuss in order to prevent the user from element values in the URL.  We want to prevent the user to change the page ID in the URL.  Currently, a user is able to hack the URL and take in the middle of a wizard process for example.  Is it possible to stop this?  Other that an element of creative previous train stop check.

    Hi Barry

    Affecting the security attribute Access Page Protection page No. URL Access and navigate between pages using the type of the Page Management Branch (uncheck the option creates a branch using redirection page in the Wizard) will avoid this:

    No URL access -Page can not be found using a URL, but the page can be the target of a type of Page Management Branch, is not doing a URL redirect.

    It is a little more restrictive that a normal direction of the session state values cannot be positioned or erased declaratively in the branch, but is not often necessary in a several step wizard, and it's pretty simple to work round using prior processes - or post-branche or by referencing the item values directly from other pages.

Maybe you are looking for