• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 3379
  • Last Modified:

remove group policy to restrict cd rom access

I was playing around with group policy on a 2008 server with a win 7 client, I disabled cd rom access. I no longer have access to the server and need to renable the cd rom. I removed the machine from the old domain but access is still denied when I try access a cd.

I have already tried
Computer Configurations --> Windows Settings --> Security Settings --> Local Policies --> Security Options

And then choose to disable this option

Devices: Restrict CD ROM access to locally logged on users only
0
Sid_F
Asked:
Sid_F
  • 4
  • 3
1 Solution
 
TasmantCommented:
did you run gpupdate /force to be sure the setting is applied on your computer?
could you post a gpresult /v of the settings applied to your server?
0
 
JDCUSAFCommented:
have you tried restoring the default GPO?

1.Log on as a domain administrator to a DC.
2.Start a command session.
3.To reset the Domain GPO, type
dcgpofix /target:DomainTo reset the Default DC GPO, type
dcgpofix /target:DCTo reset both the Domain and Default DC GPOs, type
dcgpofix /target:both4.After you enter the appropriate command in Step 3, enter Y to both prompts.
5.Close the command window.
0
 
Sid_FAuthor Commented:
I don't have access to the server anymore the laptop has been removed from the domain but I still get access denied for the cd rom. I thought the policy should be well dropped by now. There has to be a reg entry to remove this I would of imagined? tks
0
Free Backup Tool for VMware and Hyper-V

Restore full virtual machine or individual guest files from 19 common file systems directly from the backup file. Schedule VM backups with PowerShell scripts. Set desired time, lean back and let the script to notify you via email upon completion.  

 
JDCUSAFCommented:
GPO's stay active until they are overwritten
 try this

Log in as local admin

Start> Run>Regedit>
Registry Key: HKLM\SOFTWARE\Policies\Microsoft\Windows\System
(In most cases, this registry key is not present and will need to be created)
Modify or Create the Value Data Type and Value Names:
Data Type: DWORD Value // Value Name: DisableGPO
Setting for Value Data: (0 = Default (Enabled) / 1 = Disabled)
Exit Registry and Reboot
 
See if that works.
0
 
Sid_FAuthor Commented:
removed cd rom from device manager and reinstalled, works fine now!?
0
 
JDCUSAFCommented:
Great!
0
 
Sid_FAuthor Commented:
requested to close
0
 
Sid_FAuthor Commented:
resolved
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 4
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now