remove group policy to restrict cd rom access

I was playing around with group policy on a 2008 server with a win 7 client, I disabled cd rom access. I no longer have access to the server and need to renable the cd rom. I removed the machine from the old domain but access is still denied when I try access a cd.

I have already tried
Computer Configurations --> Windows Settings --> Security Settings --> Local Policies --> Security Options

And then choose to disable this option

Devices: Restrict CD ROM access to locally logged on users only
LVL 6
Sid_FAsked:
Who is Participating?
 
Sid_FConnect With a Mentor Author Commented:
removed cd rom from device manager and reinstalled, works fine now!?
0
 
TasmantCommented:
did you run gpupdate /force to be sure the setting is applied on your computer?
could you post a gpresult /v of the settings applied to your server?
0
 
JDCUSAFCommented:
have you tried restoring the default GPO?

1.Log on as a domain administrator to a DC.
2.Start a command session.
3.To reset the Domain GPO, type
dcgpofix /target:DomainTo reset the Default DC GPO, type
dcgpofix /target:DCTo reset both the Domain and Default DC GPOs, type
dcgpofix /target:both4.After you enter the appropriate command in Step 3, enter Y to both prompts.
5.Close the command window.
0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

 
Sid_FAuthor Commented:
I don't have access to the server anymore the laptop has been removed from the domain but I still get access denied for the cd rom. I thought the policy should be well dropped by now. There has to be a reg entry to remove this I would of imagined? tks
0
 
JDCUSAFCommented:
GPO's stay active until they are overwritten
 try this

Log in as local admin

Start> Run>Regedit>
Registry Key: HKLM\SOFTWARE\Policies\Microsoft\Windows\System
(In most cases, this registry key is not present and will need to be created)
Modify or Create the Value Data Type and Value Names:
Data Type: DWORD Value // Value Name: DisableGPO
Setting for Value Data: (0 = Default (Enabled) / 1 = Disabled)
Exit Registry and Reboot
 
See if that works.
0
 
JDCUSAFCommented:
Great!
0
 
Sid_FAuthor Commented:
requested to close
0
 
Sid_FAuthor Commented:
resolved
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.