?
Solved

remove group policy to restrict cd rom access

Posted on 2011-03-18
8
Medium Priority
?
3,254 Views
Last Modified: 2012-05-11
I was playing around with group policy on a 2008 server with a win 7 client, I disabled cd rom access. I no longer have access to the server and need to renable the cd rom. I removed the machine from the old domain but access is still denied when I try access a cd.

I have already tried
Computer Configurations --> Windows Settings --> Security Settings --> Local Policies --> Security Options

And then choose to disable this option

Devices: Restrict CD ROM access to locally logged on users only
0
Comment
Question by:Sid_F
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
8 Comments
 
LVL 11

Expert Comment

by:Tasmant
ID: 35164656
did you run gpupdate /force to be sure the setting is applied on your computer?
could you post a gpresult /v of the settings applied to your server?
0
 
LVL 2

Expert Comment

by:JDCUSAF
ID: 35177360
have you tried restoring the default GPO?

1.Log on as a domain administrator to a DC.
2.Start a command session.
3.To reset the Domain GPO, type
dcgpofix /target:DomainTo reset the Default DC GPO, type
dcgpofix /target:DCTo reset both the Domain and Default DC GPOs, type
dcgpofix /target:both4.After you enter the appropriate command in Step 3, enter Y to both prompts.
5.Close the command window.
0
 
LVL 6

Author Comment

by:Sid_F
ID: 35194333
I don't have access to the server anymore the laptop has been removed from the domain but I still get access denied for the cd rom. I thought the policy should be well dropped by now. There has to be a reg entry to remove this I would of imagined? tks
0
Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

 
LVL 2

Expert Comment

by:JDCUSAF
ID: 35201949
GPO's stay active until they are overwritten
 try this

Log in as local admin

Start> Run>Regedit>
Registry Key: HKLM\SOFTWARE\Policies\Microsoft\Windows\System
(In most cases, this registry key is not present and will need to be created)
Modify or Create the Value Data Type and Value Names:
Data Type: DWORD Value // Value Name: DisableGPO
Setting for Value Data: (0 = Default (Enabled) / 1 = Disabled)
Exit Registry and Reboot
 
See if that works.
0
 
LVL 6

Accepted Solution

by:
Sid_F earned 0 total points
ID: 35202330
removed cd rom from device manager and reinstalled, works fine now!?
0
 
LVL 2

Expert Comment

by:JDCUSAF
ID: 35211839
Great!
0
 
LVL 6

Author Comment

by:Sid_F
ID: 35354898
requested to close
0
 
LVL 6

Author Closing Comment

by:Sid_F
ID: 35381918
resolved
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
After seeing many questions for JRNL_WRAP_ERROR for replication failure, I thought it would be useful to write this article.
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…
This Micro Tutorial will teach you how to the overview of Microsoft Security Essentials. This is a free anti-virus software that guards your PC against viruses, spyware, worms, and other malicious software. This will be demonstrated using Windows…
Suggested Courses
Course of the Month11 days, 5 hours left to enroll

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question