Disable cd drive from group policy

Hi,

How can we disable the cd drive access from group policy and if we disable it is there any chance to enable it by the user.If we do it on a local machine will the main group policy ovr ride the local group policy.

THX
Sharath
LVL 11
bsharathAsked:
Who is Participating?
 
drmarstonConnect With a Mentor Commented:
GP load order:
Local; domain; OU; nested OU(s).
(Starts local, then walks the domain tree from the top down)
Last policy write wins (unless inheritance blocked or forced).
here is a MS KB to hide specified drives:
http://support.microsoft.com/kb/231289
otherwise you need to look at these 2 police settings:
User Configuration | Administrative Templates | Windows Components | Windows Explorer | Hide these specified drives in My Computer
And
User Configuration | Administrative Templates | Windows Components | Windows Explorer | Prevent access to drives from My Computer
Issues:
1) Are ALL computers the same? (do you have some computers with more than 1 hard drive?)
If a PC has more than 1 drive, they will be usually be named C: and D:, so if you disable D: in GP you will be removing access to the second HD, and not the CD (which would be E:)..
2) These policies does not prevent users from using other programs to gain access to local and network drives or prevent them from viewing and changing drive characteristics by using the Disk Management snap-in.
0
 
Kini pradeepIT Technology Senior ConsultantCommented:
0
 
KCTSCommented:
If yiou set up a GPO then the GPO setting will take presedence over any local policy.
0
 
Jay_Jay70Commented:
drmarston,

LSDOU to be exact :)

Regards,

James
0
All Courses

From novice to tech pro — start learning today.