Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Disable cd drive from group policy

Posted on 2007-04-08
4
Medium Priority
?
1,281 Views
Last Modified: 2008-10-03
Hi,

How can we disable the cd drive access from group policy and if we disable it is there any chance to enable it by the user.If we do it on a local machine will the main group policy ovr ride the local group policy.

THX
Sharath
0
Comment
Question by:bsharath
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
4 Comments
 
LVL 13

Expert Comment

by:Kini pradeep
ID: 18874516
0
 
LVL 70

Expert Comment

by:KCTS
ID: 18874772
If yiou set up a GPO then the GPO setting will take presedence over any local policy.
0
 
LVL 5

Accepted Solution

by:
drmarston earned 2000 total points
ID: 18876029
GP load order:
Local; domain; OU; nested OU(s).
(Starts local, then walks the domain tree from the top down)
Last policy write wins (unless inheritance blocked or forced).
here is a MS KB to hide specified drives:
http://support.microsoft.com/kb/231289
otherwise you need to look at these 2 police settings:
User Configuration | Administrative Templates | Windows Components | Windows Explorer | Hide these specified drives in My Computer
And
User Configuration | Administrative Templates | Windows Components | Windows Explorer | Prevent access to drives from My Computer
Issues:
1) Are ALL computers the same? (do you have some computers with more than 1 hard drive?)
If a PC has more than 1 drive, they will be usually be named C: and D:, so if you disable D: in GP you will be removing access to the second HD, and not the CD (which would be E:)..
2) These policies does not prevent users from using other programs to gain access to local and network drives or prevent them from viewing and changing drive characteristics by using the Disk Management snap-in.
0
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 18880915
drmarston,

LSDOU to be exact :)

Regards,

James
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Auditing domain password hashes is a commonly overlooked but critical requirement to ensuring secure passwords practices are followed. Methods exist to extract hashes directly for a live domain however this article describes a process to extract u…
Uncontrolled local administrators groups within any organization pose a huge security risk. Because these groups are locally managed it becomes difficult to audit and maintain them.
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

721 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question