Remove group policy that blocks USB

I have a group policy that is configured to block access to removable devices for all users. There is a group in Active Directory (2008 R2) that users can be put to block access to the policy and a policy that allows the removable devices. When users are in the group, the registry is changed so that they should have access, but when they try to access a CD or USB drive, they get "access denied".

The policy to block (and allow) access is by using Configuration of user - political - administrative templates - system - removable storage access. I "CD and DVD: deny read access", "CD and DVD: deny write access", "floppy drives: deny read access", "Floppy Drives: deny write access", "removable disks: deny read access ', ' removable disks: deny write access", "all removable storage classes: refuse access to all the", "Ribbon devices: deny Read access", "Ribbon devices: deny Write access", "WPD devices." ": deny Read access ' and ' WPD Devices: deny Write access.

On the strategy of blocking, all who are set to enabled and the policy to allow it, all are set to disabled. If the user is allowed access after that be denied that they are always refused on their main computer. If they log on another computer, it works.

Why the police work as it should?

Hello Kevin,

Thank you for visiting Microsoft Community and we provide a detailed description of the issue.

According to the description, I understand that the problem with Group Policy delete that blocks USB into the computer.

Certainly, I understand your concern and will try my best to help you.

To get more information about it, we have a dedicated forum where these issues are dealt with and would be better suited to the TechNet community.

Please visit the link below to find a community that will provide the best support.

https://social.technet.Microsoft.com/forums/WindowsServer/en-us/home?category=WindowsServer

I hope this information is useful.

Please let us know if you need more help, we will be happy to help you.

Thank you.

Tags: Windows

Similar Questions

  • How to use Group Policy to disable USB Internet dongles

    Dear MS,

    This is to request a solution about the use of group policy to disable USB Internet dongles and allow other USB devices like mice and keyboards in server 2008 R2. I tried several options but still, I'm having the problem. Kindly give me a solution as soon as possible.

    Hello

    Post your question in the TechNet Server Forums, as your question kindly is beyond the scope of these Forums.

    http://social.technet.Microsoft.com/forums/WindowsServer/en-us/home?category=WindowsServer

    See you soon.

  • How can I remove a window that blocks my screen

    Games icon

    You do not give a lot of information to go out of us, but in most cases, you can close a window by pressing Alt + F4.

  • How to stop the pop-up notification "this program blocked by group policy?

    Greetings,

    I created a software restriction policy that blocking a program running. In this case I get a pop-up window with the message "this program is blocked by group policy."
    How can I stop this pop-up?

    Hello

    Thanks for posting your question on Microsoft Community!

    I suggest you to ask your question on the TechNet Forums.

    http://social.technet.Microsoft.com/forums/en-us/category/w7itpro

    I hope this helps!

  • Group Policy (Windows Server 2012)

    I am using Microsoft Server R2 Standard Edition 2012. I facing ' am question is, I applied a group policy, to block all USB ports on computers in the domain. So without knowing it also applied to the servers in the network. After a while I had to disable the NIC in the server and hit restart. To my great surprise, the group policy is applied, and I am unable to use same USB keyboard and mouse after the restart of the process to the Welcome screen.

    Please post your query to:

    https://social.technet.Microsoft.com/forums/

    Server issues are better addressed there.

  • Restore to a point creation disabled by group policy

    Hello. I am trying to create a restore point but were unable to do so because whenever I go to the system protection tab in the system, the button Properties window that allowed me to create a restore point has been disabled. next to the button's text saying "restore to a point creation disabled by group policy." I have vista home basic so any kind of editor of group policy that is available on vista professional, enterprise or ultimate edition is not available on my computer. I'm running anti-virus, spyware, and malware scans to see what could be the cause. But if the scans show up clean, what steps should I take to correct the problem, if it is available?

    Hi HoodWizard2009,

    If this has not been triggered after executing a tweak utility, so it is advisable to perform a full scan as this can be a work of some malware. Once done, use the registry fix in the link below to remove the SR policy values.

    [Restore creation point disabled by group policy]

    Malware Removal Forums - Google search
    Ramesh Srinivasan, Microsoft MVP [Windows Desktop Experience]

  • Unable to set the password in Active Directory 2008 R2 group policy

    We are trying to create a group policy that renames the built-in to our servers administrator account and change the password.  The strange thing is that when we create this Group Policy Computer Configuration > preferences > Control Panel Settings > local users and groups, the password section is grayed out.  We have a test domain, and this isn't a problem here.

    We tried to set the password with different accounts (domain administrator and other members of the Domain Admins group) and different machines (directly on my workstation and domain controller).  Here is a screenshot of what we see.  Any help would be greatly appreciated!

    I found the cause in MS14-025.

  • I want to set up a group strategy that requires an administrator password during installation

    At my work, I want to implement a group policy that makes it so users can do almost everything, but when they install a program they guests of identification of account/password admin.  What type of user should I do?  What settings for I must change so that they can almost nothing, but can I be invited to a facility?  If anyone has an explanation or tutorial that would be great.

    Hi Jon,

    Thanks for posting your query in Microsoft Community. I understand that you want configuration group policy in Windows 7.

    Please visit the link below to find a community that will provide the support you want.

    http://social.technet.Microsoft.com/forums/en/w7itproinstall/threads

    Hope it will be useful. If you still have questions, please answer that and we will be happy

  • Safely remove hardware shortcut blocked by group policy.

    Accidentally posted this earlier in the windows 7 box... its a matter of xp.

    Hi all

    Im having some trouble with our strategy of group set up.  We like to remove from the tray of some users, but this introduces the problem of how they eject their USB drives.

    We stumbled upon this path of the shortcut RunDll32.exe shell32.dll, Control_RunDLL hotplug.dll which works very well.  The problem is that we have a group policy setting that allows only the specified in a list programs to be run.  Located atUser Config/Admin time/system/run only allowed Windows applications.

    Ive tried to add rundll32.exe in the list, but still running the shortcut gets blocked.  Anyone could shed some light on this?

    Thank you

    SJ

    Hello jillbeanpallipe,

    The Microsoft Answers community focuses on issues and problems related to the consumer environment. Please join the public IT pro TechNet forums below:
    TechNet - Windows Server
     
    Thank you

  • USB drive to block via group policy but keyboard, mouse, printers and USB Datacard work

    USB drive to block via group policy but keyboard, mouse, printers and USB Datacard work

    USB drive to block via group policy but keyboard, mouse, printers and USB Datacard work

    How to activate a strategy disable Usb drive but the keyboard mouse printer and the usb datacard work machine Windows 7.

    Hello

    In order to get better assistance to the group policy setting to block the use of a material to a computer, you should post your query in group policy on TechNet forums. I provided the link below, please use it to more assistance with Group Policy:

    http://social.technet.Microsoft.com/forums/en-us/winserverGP/threads

    I can't create a new thread there matching your query will help you to better understand the implementation of group policy.

  • The program is blocked by group policy, you contact the administrator

    original title: group policy

    I get an error when I try to play legally purchased game just cause 2

    the program is blocked by the foundations of the group, contact your administrator

    I have legal win 7 ultimate

    I don't know where or how or why this restriction is in Group Policy (you are on a domain network or is it a computer sttand-only or only connected to an ad hoc network).  If connected to a domain, the restriction may be from the server in which case you need to talk to the server administrator to understand why it is there and if it can be removed.

    If it is a home network or a stand-alone computer, access you group policy editor by going to start / search box and type in the Group Policy Editor, and then double-click on the icon for the program that apppears.  You will now be in the editor.  That is the problem - there is no way to search for the Publisher, so essentially you must check all entries to find the one that is blocking you.  On my system, no policy was in place by default, so I don't know how your got policies implemented - but if she says that group policy is causing this program is the solution.  I wish there were an easier way, but I know not at all.

    Sometimes blocks of security software programs by using Group Policy, so it is possible, this is how it happened--unfortunately, it does not help us find the location of the block, so it can be deleted.

    I hope this helps.

    Good luck!

    Lorien - MCSA/MCSE/network + / has + - if this post solves your problem, please click the 'Mark as answer' or 'Useful' button at the top of this message. Marking a post as answer, or relatively useful, you help others find the answer more quickly.

  • "Group Policy" block several functions and there is no way to fix it

    When I try to change some features/functions on my Win7 system, the operating system blocks attempts, telling me that "group policy" prevents me from doing what I want and to consult my "system administrator".  Because my house is not a system administrator or IT Department, this suggestion is unnecessary.  The latest incident was when I tried to add/modify one of the desktop gadgets.  When I search the online group policy problem, I'm advised to run gpedit.msc but program that causes an error, "MMC could not create the snap."

    How can I get gpedit.msc to work or to disable the reorganize of group policy on my Win7 Home Premium system? (I have already mentioned the UAC level 'None' and my profile the user has administrator rights).

    Hi Peters4,

    Thank you for visiting Microsoft Answers!

    You may need to remove some snap-ins to the console MMC Snap.

    To do this:

    1. click on start, in the box, type start research "mmc", right-click on mmc, and then click Run as administrator and press ENTER.

    2. click on "file-> add/remove snap-ins."

    3. in the to ' Selected Snap-ins box, click on and remove all entries except "the Console root.

    You can consult the following link: http://windows.microsoft.com/en-us/windows-vista/Microsoft-Management-Console-snap-ins

    Concerning
    Divya R - Microsoft Support Engineer.
    Visit our Microsoft answers feedback Forum and let us know what you think.

  • Error "this program is blocked by group policy. For more information, contact your system administrator. "downloading program.

    Original title: virus

    I can't download new programs, changing the date or make a few changes to my computer, that is the message I get "' this program is blocked by group policy. For more information, contact your system administrator ' ' how can I solve this problem.

    Hello

    Thanks for posting your query to the Microsoft forum. I will definitely help you with this.

    I would like to know;

    1. Your computer is connected through a network of field?
    2. You did it any significant hardware or change software on the computer before this problem?
    3. You have any other security software installed in the system or that you have uninstalled earlier?

    The question could arise due to lack of permissions due to the remains of some program in the uninstalled registry before. To further diagnose the problem, I would suggest trying the following methods and check if the problem persists.

    Method 1:

    Run the next fixit and check if the remains of any previously uninstalled security software is deleted.

    The problems that the programs cannot be installed or uninstalled

    Method 2:

    Give all the permissions on your user account and check if it helps.

    Follow the steps to give all permissions:

    a. press the Windows key + R, type regedit.exe in the Run dialog box and press enter.

    b. right-click on HKEY_LOCAL_MACHINE , and then click permissions.

    c. click Add under the Security tab and add a new group: everyone.

    d. Select everyone and check the option: total control.

    e. restart the computer and check if the problem is solved or not.

    Important: This section, method, or task contains steps that tell you how to modify the registry. However, serious problems can occur if you modify the registry incorrectly. Therefore, make sure that you proceed with caution. For added protection, back up the registry before you edit it. Then you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click on the number below to view the article in the Microsoft Knowledge Base:

    How to back up and restore the registry in Windows

    http://support.Microsoft.com/kb/322756/en-us

    Method 3:

    Please see the advice given by HappyAndyK April 26, 2014.

    http://answers.Microsoft.com/en-us/Windows/Forum/windows8_1-security/group-policy-on-Windows-81-issue/8a524894-fa6c-41AE-9E26-29ec4ccca36c

    System Restore warning: When you use system restore to restore the computer to a previous state, the programs and updates that you have installed are removed.

    Let us know if you need more assistance. We will be happy to help you.

    _____________________

    Thank you best regards &,.

    Isha Soni

  • I get a msg that says that my firewall is not enabled, when I try and turn it on, it says that my group policy is not allowing me to turn it on. How can I activate some group policy is disabled, so my firewall work?

    I searched around for group policy, but no luck.

    A reinstall is quite often the fastest way to solve a problem.  Your hard drive will be completely erased in the process, it will be necessary to back up your personal files beforehand.  An external USB drive is good for this.  Also, you will need to reinstall all the applications that came with the computer.  If you use the Encrypting File System (EFS), make sure you back up your certificates as well or you will lose access to all your encrypted files - even if saved. (Encrypted files usually appear with names in green).

    A "repair install" which does not erase your drive might also be possible, but if you have installed SP2, SP3, IE7 or IE8 you bought your machine, you should read the following article:

    "How to perform a Windows XP repair installation, if a later version of Internet Explorer is installed"
      <>http://support.Microsoft.com/kb/917964 >

    HTH,
    JW

  • Windows defender and he says Defender is disabled by group policy? That is what it is?

    Remember - this is a public forum so never post private information such as numbers of mail or telephone!

    Ideas:

    • JUST a SUBSCRIPTION to McAFEE SECURITY WAS EXHAUSTED
    • CANNOT OPEN WINDOWS DEFENDER
    • SAYS WINDOWS DEFENDER IS DISABLED BY GROUP POLICY?

    First, go to your application of features & programs or add remove & uninstall your McAfee has expired.
    Then, you use McAfee Removal Tool to remove the 'remains' of McAfee from the system. Here is the link:
    http://www.pchell.com/virus/uninstallmcafee.shtml
    Scroll down until you see:
    Follow these instructions to download the McAfee removal tool and run it to remove the programs above.
    (download the removal tool, then run it)

    When this is done, here is how to restart Windows Defender:

    Start button > in the search box, typeServices> press the Enter key > scroll to find Windows Defender, click on it >...
    topic status , it must be said... Has begun
    under Startup Type, it must be said... Automatic
    If it does not say that, right click on Windows Defender > click Properties > in the new window, make the necessary changes, as above > click OK when finished.

    For the benefits of others looking for answers, please mark as answer suggestion if it solves your problem.

Maybe you are looking for