Sid_F
asked on
remove group policy to restrict cd rom access
I was playing around with group policy on a 2008 server with a win 7 client, I disabled cd rom access. I no longer have access to the server and need to renable the cd rom. I removed the machine from the old domain but access is still denied when I try access a cd.
I have already tried
Computer Configurations --> Windows Settings --> Security Settings --> Local Policies --> Security Options
And then choose to disable this option
Devices: Restrict CD ROM access to locally logged on users only
I have already tried
Computer Configurations --> Windows Settings --> Security Settings --> Local Policies --> Security Options
And then choose to disable this option
Devices: Restrict CD ROM access to locally logged on users only
have you tried restoring the default GPO?
1.Log on as a domain administrator to a DC.
2.Start a command session.
3.To reset the Domain GPO, type
dcgpofix /target:DomainTo reset the Default DC GPO, type
dcgpofix /target:DCTo reset both the Domain and Default DC GPOs, type
dcgpofix /target:both4.After you enter the appropriate command in Step 3, enter Y to both prompts.
5.Close the command window.
1.Log on as a domain administrator to a DC.
2.Start a command session.
3.To reset the Domain GPO, type
dcgpofix /target:DomainTo reset the Default DC GPO, type
dcgpofix /target:DCTo reset both the Domain and Default DC GPOs, type
dcgpofix /target:both4.After you enter the appropriate command in Step 3, enter Y to both prompts.
5.Close the command window.
ASKER
I don't have access to the server anymore the laptop has been removed from the domain but I still get access denied for the cd rom. I thought the policy should be well dropped by now. There has to be a reg entry to remove this I would of imagined? tks
GPO's stay active until they are overwritten
try this
Log in as local admin
Start> Run>Regedit>
Registry Key: HKLM\SOFTWARE\Policies\Mic
(In most cases, this registry key is not present and will need to be created)
Modify or Create the Value Data Type and Value Names:
Data Type: DWORD Value // Value Name: DisableGPO
Setting for Value Data: (0 = Default (Enabled) / 1 = Disabled)
Exit Registry and Reboot
See if that works.
try this
Log in as local admin
Start> Run>Regedit>
Registry Key: HKLM\SOFTWARE\Policies\Mic
(In most cases, this registry key is not present and will need to be created)
Modify or Create the Value Data Type and Value Names:
Data Type: DWORD Value // Value Name: DisableGPO
Setting for Value Data: (0 = Default (Enabled) / 1 = Disabled)
Exit Registry and Reboot
See if that works.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Great!
ASKER
requested to close
ASKER
resolved
could you post a gpresult /v of the settings applied to your server?