Link to home
Start Free TrialLog in
Avatar of Ihab
Ihab

asked on

I can't write/delete/create new folder in usb storage?

A laptop that was connected to a domain lately (windows 7 ) can read usb storage but cant write/delete/create new folder "Destination folder access denied-you need permission to perform this action". I think the old domain implemented a group policy to deny access to usb. Is there any way to remove this policy from the laptop, knowing we have local admin account on the laptop.
Thanks
Avatar of Rob Armstrong
Rob Armstrong

Can you right click the flash drive in Computer, go to security and give your admin account ownership rights to it?
Avatar of Ihab

ASKER

I can do but still same message
Avatar of Joshua Grantom
open gpedit.msc and look under

Computer Configuration > Administrative Templates > System > Removable Storage Access.

If any of these are Enabled, double-click and select not configured. You may need to restart for changes to take affect.
Avatar of Ihab

ASKER

I did this option, still the same
there may be some other software on the machine that is preventing access to USB. I would also check the antivirus settings.
Avatar of Ihab

ASKER

It is from the old domain group policy , because it was working fine until I test it and join a test domain , after I restart the problem happened
Instead of setting the above to Not Configured, try to set it to disabled.
Avatar of Ihab

ASKER

I tried this option , still not working
Hi,

Run gpresult /v and post the result here. If there's an old policy we need to see what you have applied. The chances are that the old GPO tattooed the registry though and won't appear in the current GPO list. At least we can eliminate current ones.

Mike
Avatar of Ihab

ASKER

eDevices\{53f5630b-b6bf-11d0-94f2-00a0c91efb8b}\Deny_Write
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: Mobile Block Write
                KeyName:     Software\Policies\Microsoft\Windows\RemovableStorag
eDevices\{53f56311-b6bf-11d0-94f2-00a0c91efb8b}\Deny_Read
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: Ardiya Wsus
                KeyName:     Software\Policies\Microsoft\Windows\WindowsUpdate\W
UServer
                Value:       104, 0, 116, 0, 116, 0, 112, 0, 58, 0, 47, 0, 47, 0
, 97, 0, 115, 0, 103, 0, 45, 0, 119, 0, 115, 0, 117, 0, 115, 0, 0, 0
                State:       Enabled

            GPO: Ardiya Wsus
                KeyName:     Software\Policies\Microsoft\WindowsFirewall\DomainP
rofile\IcmpSettings\AllowOutboundDestinationUnreachable
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: Ardiya Wsus
                KeyName:     Software\Policies\Microsoft\Windows\WindowsUpdate\E
levateNonAdmins
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: Ardiya Wsus
                KeyName:     Software\Policies\Microsoft\Windows\WindowsUpdate\A
U\AUOptions
                Value:       4, 0, 0, 0
                State:       Enabled

            GPO: Mobile Block Write
                KeyName:     Software\Policies\Microsoft\Windows\RemovableStorag
eDevices\{53f56311-b6bf-11d0-94f2-00a0c91efb8b}\Deny_Write
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: Ardiya Wsus
                KeyName:     Software\Policies\Microsoft\Windows\WindowsUpdate\A
U\DetectionFrequency
                Value:       22, 0, 0, 0
                State:       Enabled

            GPO: Ardiya Wsus
                KeyName:     Software\Policies\Microsoft\WindowsFirewall\DomainP
rofile\IcmpSettings\AllowInboundRouterRequest
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: Ardiya Wsus
                KeyName:     Software\Policies\Microsoft\Windows\WindowsUpdate\A
U\AutoInstallMinorUpdates
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: Ardiya Wsus
                KeyName:     Software\Policies\Microsoft\Windows\WindowsUpdate\A
U\ScheduledInstallDay
                Value:       2, 0, 0, 0
                State:       Enabled

            GPO: Ardiya Wsus
                KeyName:     Software\Policies\Microsoft\WindowsFirewall\DomainP
rofile\DoNotAllowExceptions
                Value:       0, 0, 0, 0
                State:       Enabled

            GPO: Ardiya Wsus
                KeyName:     Software\Policies\Microsoft\Windows\Task Scheduler5
.0\Task Creation
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: Ardiya Wsus
                KeyName:     Software\Policies\Microsoft\Windows\WindowsUpdate\A
U\DetectionFrequencyEnabled
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: Mobile Block Write
                KeyName:     Software\Policies\Microsoft\Windows\RemovableStorag
eDevices\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\Deny_Write
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: Ardiya Wsus
                KeyName:     Software\Policies\Microsoft\Windows\WindowsUpdate\A
U\ScheduledInstallTime
                Value:       9, 0, 0, 0
                State:       Enabled

            GPO: Ardiya Wsus
                KeyName:     Software\Policies\Microsoft\WindowsFirewall\DomainP
rofile\IcmpSettings\AllowInboundEchoRequest
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: Ardiya Wsus
                KeyName:     Software\Policies\Microsoft\WindowsFirewall\DomainP
rofile\IcmpSettings\AllowOutboundPacketTooBig
                Value:       1, 0, 0, 0
                State:       Enabled


USER SETTINGS
--------------

    Last time Group Policy was applied: 21/09/2014 at 9:55:24 PM
    Group Policy was applied from:      N/A
    Group Policy slow link threshold:   500 kbps
    Domain Name:                        KWT-DHW-1007016
    Domain Type:                        <Local Computer>

    Applied Group Policy Objects
    -----------------------------
        Local Group Policy

    The user is a part of the following security groups
    ---------------------------------------------------
        None
        Everyone
        Local account and member of Administrators group
        BUILTIN\Administrators
        BUILTIN\Users
        NT AUTHORITY\INTERACTIVE
        CONSOLE LOGON
        NT AUTHORITY\Authenticated Users
        This Organization
        Local account
        LOCAL
        NTLM Authentication
        High Mandatory Level

    The user has the following security privileges
    ----------------------------------------------

        Bypass traverse checking
        Manage auditing and security log
        Back up files and directories
        Restore files and directories
        Change the system time
        Shut down the system
        Force shutdown from a remote system
        Take ownership of files or other objects
        Debug programs
        Modify firmware environment values
        Profile system performance
        Profile single process
        Increase scheduling priority
        Load and unload device drivers
        Create a pagefile
        Adjust memory quotas for a process
        Remove computer from docking station
        Perform volume maintenance tasks
        Impersonate a client after authentication
        Create global objects
        Change the time zone
        Create symbolic links
        Increase a process working set

    Resultant Set Of Policies for User
    -----------------------------------

        Software Installations
        ----------------------
            N/A

        Logon Scripts
        -------------
            N/A

        Logoff Scripts
        --------------
            N/A

        Public Key Policies
        -------------------
            N/A

        Administrative Templates
        ------------------------
            GPO: Local Group Policy
                KeyName:     Software\Policies\Microsoft\Windows\Network Connect
ions\NC_DeleteConnection
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: Local Group Policy
                KeyName:     Software\Policies\Microsoft\Windows\Network Connect
ions\NC_Statistics
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: Local Group Policy
                KeyName:     Software\Policies\Microsoft\Windows\Network Connect
ions\NC_LanConnect
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: Local Group Policy
                KeyName:     Software\Policies\Microsoft\Windows\Network Connect
ions\NC_RasChangeProperties
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: Local Group Policy
                KeyName:     Software\Policies\Microsoft\Windows\Network Connect
ions\NC_DialupPrefs
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: Local Group Policy
                KeyName:     Software\Policies\Microsoft\Windows\Network Connect
ions\NC_LanProperties
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: Local Group Policy
                KeyName:     Software\Policies\Microsoft\Windows\Network Connect
ions\NC_AddRemoveComponents
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: Local Group Policy
                KeyName:     Software\Policies\Microsoft\Windows\Network Connect
ions\NC_RasConnect
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: Local Group Policy
                KeyName:     Software\Policies\Microsoft\Windows\Network Connect
ions\NC_AdvancedSettings
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: Local Group Policy
                KeyName:     Software\Policies\Microsoft\Windows\Network Connect
ions\NC_RenameMyRasConnection
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: Local Group Policy
                KeyName:     Software\Policies\Microsoft\Windows\Network Connect
ions\NC_LanChangeProperties
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: Local Group Policy
                KeyName:     Software\Policies\Microsoft\Windows\Network Connect
ions\NC_AllowAdvancedTCPIPConfig
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: Local Group Policy
                KeyName:     Software\Policies\Microsoft\Windows\Network Connect
ions\NC_ChangeBindState
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: Local Group Policy
                KeyName:     Software\Policies\Microsoft\Windows\Network Connect
ions\NC_NewConnectionWizard
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: Local Group Policy
                KeyName:     Software\Policies\Microsoft\Windows\Network Connect
ions\NC_RasMyProperties
                Value:       1, 0, 0, 0
                State:       Enabled

        Folder Redirection
        ------------------
            N/A

        Internet Explorer Browser User Interface
        ----------------------------------------
            N/A

        Internet Explorer Connection
        ----------------------------
            N/A

        Internet Explorer URLs
        ----------------------
            N/A

        Internet Explorer Security
        --------------------------
            N/A

        Internet Explorer Programs
        --------------------------
            N/A

C:\Users\Ihab>
ASKER CERTIFIED SOLUTION
Avatar of Mike Taylor
Mike Taylor
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial