Students denied access to usb

[richbrowncardiff]

Hi there the answer is in GPO. Its probably under the default domain policy or default desktop policy (depends on who wrote your GPO's) there is a setting User Configuration \ Administrative Templates \ Windows Components \ Windows Explorer. which allows you to restrict access to drive A:, C:, D: E: (or combination of them) if you change this to c:\ only then access will be restored to usb & Cd's (assuming you want cd access) if not just restric access to C & D then E:\ would be usb. this should resolve the problem.

 

hope this helps.

 

cheers

[witch]

Hi there the answer is in GPO. Its probably under the default domain policy or default desktop policy (depends on who wrote your GPO's) there is a setting User Configuration \ Administrative Templates \ Windows Components \ Windows Explorer. which allows you to restrict access to drive A:, C:, D: E: (or combination of them) if you change this to c:\ only then access will be restored to usb & Cd's (assuming you want cd access) if not just restric access to C & D then E:\ would be usb. this should resolve the problem.

 

hope this helps.

 

cheers

Thanks,but not in default domain or default anything as this would affect all users and the staff CAN access the USB. I have looked everywhere in every other policy. All the settings are "not configured"!

Must be somewhere!

[richbrowncardiff]

ok well. the setting is off by default so it must be enabled somewhere. possible a contradictory policy or a policy is being inherited from somewhere. have you got any other security software in place or just purely group policy ? I wrote all our polices from scratch and debated a lot about if to enable this feature or not as by default access is granted to pretty much everything.

 

i would run gp modelling on a pc in the student container and use a student user print the report off and loot at it that way (sorry if you have already but i can't think of anything else)

[witch]

Nope, just group policy

Have run gpmodelling with no results that help.

I think something somewhere is enabled but isnt showing.

When I have time I am going to delete and recreate a few important policies and see if it works

[richbrowncardiff]

ok well if you want second pair of eyes pm me the policy(s) and will take a look for you.

[witch]

Thanks

I am lucky in that I work in two schools with, as of three weeks ago, pretty identical servers and AD and GP structure. So I am going to use one to recreate key policies - eg Student Policy etc

[witch]

Right - now I have deleted and recreated the default domain policy - as far as I can tell, identically to the way it was...and altered the settings in the student policy - and it now works!!

I can't imagine why?

 

Anyway, thanks all for the help

[old_n07]

The joys of Windows GP's, it used to be that (going back to NT) if a policy had a setting enabled you had to set it to disabled to change it as setting it back to not configured had no effect.