troubleshooting Question

Windows Server 2008 GPO lockout of CD-ROM devices - cannot revert

Avatar of Sysops_bbf
Sysops_bbfFlag for Afghanistan asked on
Microsoft Legacy OSWindows Server 2008Windows 7
5 Comments1 Solution1692 ViewsLast Modified:
Hi there,

I've been wrecking my brain for the last 3 days now with an issue after rolling out a GPO to disable USB, floppy and CD-ROM devices.

Roll-out was through server 2008 to a mixed domain (2008, 2003, xp, win7) hence the adm file located in the below article:

http://support.microsoft.com/kb/555324

After disabling all devices, I have had to re-enable them all. Everything is working fine for floppy and USB devices but the end users keep getting access denied to the CD-ROM.

Here is an article on the exact same issue, but the resolution doesn't work on win7 machines:
"sc start cdrom
sc config cdrom start= enable"

https://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/2003_Server/Q_26373871.html

I have tried editing the registry values, no joy.
Tried changing permissions on the cdrom.sys files
 Re-enabled all devices through the GPO, including win7 specific settings:
Computer Configuration\Administrative Templates: Policy definitions (ADMX files) retrieved from the local machine\System\Removable Storage Access
All values set to disabled.
And
Computer Configuration\Administrative Templates: Policy definitions (ADMX files) retrieved from the local machine\Classic Administrative Templates (ADM)\Custom Policy Settings\Restrict Drives
All values set to enabled and started


I would like to be able to roll out the solution (what ever it may be) as we have over 100 users...

Any help at all would be greatly appreciated!!

Thanks in advance,
Aidan.
ASKER CERTIFIED SOLUTION
Sysops_bbf

Our community of experts have been thoroughly vetted for their expertise and industry experience.

Join our community to see this answer!
Unlock 1 Answer and 5 Comments.
Start Free Trial
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 5 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros