Ihab
asked on
I can't write/delete/create new folder in usb storage?
A laptop that was connected to a domain lately (windows 7 ) can read usb storage but cant write/delete/create new folder "Destination folder access denied-you need permission to perform this action". I think the old domain implemented a group policy to deny access to usb. Is there any way to remove this policy from the laptop, knowing we have local admin account on the laptop.
Thanks
Thanks
Can you right click the flash drive in Computer, go to security and give your admin account ownership rights to it?
ASKER
I can do but still same message
open gpedit.msc and look under
Computer Configuration > Administrative Templates > System > Removable Storage Access.
If any of these are Enabled, double-click and select not configured. You may need to restart for changes to take affect.
Computer Configuration > Administrative Templates > System > Removable Storage Access.
If any of these are Enabled, double-click and select not configured. You may need to restart for changes to take affect.
ASKER
I did this option, still the same
there may be some other software on the machine that is preventing access to USB. I would also check the antivirus settings.
ASKER
It is from the old domain group policy , because it was working fine until I test it and join a test domain , after I restart the problem happened
Instead of setting the above to Not Configured, try to set it to disabled.
ASKER
I tried this option , still not working
Hi,
Run gpresult /v and post the result here. If there's an old policy we need to see what you have applied. The chances are that the old GPO tattooed the registry though and won't appear in the current GPO list. At least we can eliminate current ones.
Mike
Run gpresult /v and post the result here. If there's an old policy we need to see what you have applied. The chances are that the old GPO tattooed the registry though and won't appear in the current GPO list. At least we can eliminate current ones.
Mike
ASKER
eDevices\{53f5630b-b6bf-11 d0-94f2-00 a0c91efb8b }\Deny_Wri te
Value: 1, 0, 0, 0
State: Enabled
GPO: Mobile Block Write
KeyName: Software\Policies\Microsof t\Windows\ RemovableS torag
eDevices\{53f56311-b6bf-11 d0-94f2-00 a0c91efb8b }\Deny_Rea d
Value: 1, 0, 0, 0
State: Enabled
GPO: Ardiya Wsus
KeyName: Software\Policies\Microsof t\Windows\ WindowsUpd ate\W
UServer
Value: 104, 0, 116, 0, 116, 0, 112, 0, 58, 0, 47, 0, 47, 0
, 97, 0, 115, 0, 103, 0, 45, 0, 119, 0, 115, 0, 117, 0, 115, 0, 0, 0
State: Enabled
GPO: Ardiya Wsus
KeyName: Software\Policies\Microsof t\WindowsF irewall\Do mainP
rofile\IcmpSettings\AllowO utboundDes tinationUn reachable
Value: 1, 0, 0, 0
State: Enabled
GPO: Ardiya Wsus
KeyName: Software\Policies\Microsof t\Windows\ WindowsUpd ate\E
levateNonAdmins
Value: 1, 0, 0, 0
State: Enabled
GPO: Ardiya Wsus
KeyName: Software\Policies\Microsof t\Windows\ WindowsUpd ate\A
U\AUOptions
Value: 4, 0, 0, 0
State: Enabled
GPO: Mobile Block Write
KeyName: Software\Policies\Microsof t\Windows\ RemovableS torag
eDevices\{53f56311-b6bf-11 d0-94f2-00 a0c91efb8b }\Deny_Wri te
Value: 1, 0, 0, 0
State: Enabled
GPO: Ardiya Wsus
KeyName: Software\Policies\Microsof t\Windows\ WindowsUpd ate\A
U\DetectionFrequency
Value: 22, 0, 0, 0
State: Enabled
GPO: Ardiya Wsus
KeyName: Software\Policies\Microsof t\WindowsF irewall\Do mainP
rofile\IcmpSettings\AllowI nboundRout erRequest
Value: 1, 0, 0, 0
State: Enabled
GPO: Ardiya Wsus
KeyName: Software\Policies\Microsof t\Windows\ WindowsUpd ate\A
U\AutoInstallMinorUpdates
Value: 1, 0, 0, 0
State: Enabled
GPO: Ardiya Wsus
KeyName: Software\Policies\Microsof t\Windows\ WindowsUpd ate\A
U\ScheduledInstallDay
Value: 2, 0, 0, 0
State: Enabled
GPO: Ardiya Wsus
KeyName: Software\Policies\Microsof t\WindowsF irewall\Do mainP
rofile\DoNotAllowException s
Value: 0, 0, 0, 0
State: Enabled
GPO: Ardiya Wsus
KeyName: Software\Policies\Microsof t\Windows\ Task Scheduler5
.0\Task Creation
Value: 1, 0, 0, 0
State: Enabled
GPO: Ardiya Wsus
KeyName: Software\Policies\Microsof t\Windows\ WindowsUpd ate\A
U\DetectionFrequencyEnable d
Value: 1, 0, 0, 0
State: Enabled
GPO: Mobile Block Write
KeyName: Software\Policies\Microsof t\Windows\ RemovableS torag
eDevices\{53f5630d-b6bf-11 d0-94f2-00 a0c91efb8b }\Deny_Wri te
Value: 1, 0, 0, 0
State: Enabled
GPO: Ardiya Wsus
KeyName: Software\Policies\Microsof t\Windows\ WindowsUpd ate\A
U\ScheduledInstallTime
Value: 9, 0, 0, 0
State: Enabled
GPO: Ardiya Wsus
KeyName: Software\Policies\Microsof t\WindowsF irewall\Do mainP
rofile\IcmpSettings\AllowI nboundEcho Request
Value: 1, 0, 0, 0
State: Enabled
GPO: Ardiya Wsus
KeyName: Software\Policies\Microsof t\WindowsF irewall\Do mainP
rofile\IcmpSettings\AllowO utboundPac ketTooBig
Value: 1, 0, 0, 0
State: Enabled
USER SETTINGS
--------------
Last time Group Policy was applied: 21/09/2014 at 9:55:24 PM
Group Policy was applied from: N/A
Group Policy slow link threshold: 500 kbps
Domain Name: KWT-DHW-1007016
Domain Type: <Local Computer>
Applied Group Policy Objects
-------------------------- ---
Local Group Policy
The user is a part of the following security groups
-------------------------- ---------- ---------- -----
None
Everyone
Local account and member of Administrators group
BUILTIN\Administrators
BUILTIN\Users
NT AUTHORITY\INTERACTIVE
CONSOLE LOGON
NT AUTHORITY\Authenticated Users
This Organization
Local account
LOCAL
NTLM Authentication
High Mandatory Level
The user has the following security privileges
-------------------------- ---------- ----------
Bypass traverse checking
Manage auditing and security log
Back up files and directories
Restore files and directories
Change the system time
Shut down the system
Force shutdown from a remote system
Take ownership of files or other objects
Debug programs
Modify firmware environment values
Profile system performance
Profile single process
Increase scheduling priority
Load and unload device drivers
Create a pagefile
Adjust memory quotas for a process
Remove computer from docking station
Perform volume maintenance tasks
Impersonate a client after authentication
Create global objects
Change the time zone
Create symbolic links
Increase a process working set
Resultant Set Of Policies for User
-------------------------- ---------
Software Installations
----------------------
N/A
Logon Scripts
-------------
N/A
Logoff Scripts
--------------
N/A
Public Key Policies
-------------------
N/A
Administrative Templates
------------------------
GPO: Local Group Policy
KeyName: Software\Policies\Microsof t\Windows\ Network Connect
ions\NC_DeleteConnection
Value: 1, 0, 0, 0
State: Enabled
GPO: Local Group Policy
KeyName: Software\Policies\Microsof t\Windows\ Network Connect
ions\NC_Statistics
Value: 1, 0, 0, 0
State: Enabled
GPO: Local Group Policy
KeyName: Software\Policies\Microsof t\Windows\ Network Connect
ions\NC_LanConnect
Value: 1, 0, 0, 0
State: Enabled
GPO: Local Group Policy
KeyName: Software\Policies\Microsof t\Windows\ Network Connect
ions\NC_RasChangePropertie s
Value: 1, 0, 0, 0
State: Enabled
GPO: Local Group Policy
KeyName: Software\Policies\Microsof t\Windows\ Network Connect
ions\NC_DialupPrefs
Value: 1, 0, 0, 0
State: Enabled
GPO: Local Group Policy
KeyName: Software\Policies\Microsof t\Windows\ Network Connect
ions\NC_LanProperties
Value: 1, 0, 0, 0
State: Enabled
GPO: Local Group Policy
KeyName: Software\Policies\Microsof t\Windows\ Network Connect
ions\NC_AddRemoveComponent s
Value: 1, 0, 0, 0
State: Enabled
GPO: Local Group Policy
KeyName: Software\Policies\Microsof t\Windows\ Network Connect
ions\NC_RasConnect
Value: 1, 0, 0, 0
State: Enabled
GPO: Local Group Policy
KeyName: Software\Policies\Microsof t\Windows\ Network Connect
ions\NC_AdvancedSettings
Value: 1, 0, 0, 0
State: Enabled
GPO: Local Group Policy
KeyName: Software\Policies\Microsof t\Windows\ Network Connect
ions\NC_RenameMyRasConnect ion
Value: 1, 0, 0, 0
State: Enabled
GPO: Local Group Policy
KeyName: Software\Policies\Microsof t\Windows\ Network Connect
ions\NC_LanChangePropertie s
Value: 1, 0, 0, 0
State: Enabled
GPO: Local Group Policy
KeyName: Software\Policies\Microsof t\Windows\ Network Connect
ions\NC_AllowAdvancedTCPIP Config
Value: 1, 0, 0, 0
State: Enabled
GPO: Local Group Policy
KeyName: Software\Policies\Microsof t\Windows\ Network Connect
ions\NC_ChangeBindState
Value: 1, 0, 0, 0
State: Enabled
GPO: Local Group Policy
KeyName: Software\Policies\Microsof t\Windows\ Network Connect
ions\NC_NewConnectionWizar d
Value: 1, 0, 0, 0
State: Enabled
GPO: Local Group Policy
KeyName: Software\Policies\Microsof t\Windows\ Network Connect
ions\NC_RasMyProperties
Value: 1, 0, 0, 0
State: Enabled
Folder Redirection
------------------
N/A
Internet Explorer Browser User Interface
-------------------------- ---------- ----
N/A
Internet Explorer Connection
-------------------------- --
N/A
Internet Explorer URLs
----------------------
N/A
Internet Explorer Security
--------------------------
N/A
Internet Explorer Programs
--------------------------
N/A
C:\Users\Ihab>
Value: 1, 0, 0, 0
State: Enabled
GPO: Mobile Block Write
KeyName: Software\Policies\Microsof
eDevices\{53f56311-b6bf-11
Value: 1, 0, 0, 0
State: Enabled
GPO: Ardiya Wsus
KeyName: Software\Policies\Microsof
UServer
Value: 104, 0, 116, 0, 116, 0, 112, 0, 58, 0, 47, 0, 47, 0
, 97, 0, 115, 0, 103, 0, 45, 0, 119, 0, 115, 0, 117, 0, 115, 0, 0, 0
State: Enabled
GPO: Ardiya Wsus
KeyName: Software\Policies\Microsof
rofile\IcmpSettings\AllowO
Value: 1, 0, 0, 0
State: Enabled
GPO: Ardiya Wsus
KeyName: Software\Policies\Microsof
levateNonAdmins
Value: 1, 0, 0, 0
State: Enabled
GPO: Ardiya Wsus
KeyName: Software\Policies\Microsof
U\AUOptions
Value: 4, 0, 0, 0
State: Enabled
GPO: Mobile Block Write
KeyName: Software\Policies\Microsof
eDevices\{53f56311-b6bf-11
Value: 1, 0, 0, 0
State: Enabled
GPO: Ardiya Wsus
KeyName: Software\Policies\Microsof
U\DetectionFrequency
Value: 22, 0, 0, 0
State: Enabled
GPO: Ardiya Wsus
KeyName: Software\Policies\Microsof
rofile\IcmpSettings\AllowI
Value: 1, 0, 0, 0
State: Enabled
GPO: Ardiya Wsus
KeyName: Software\Policies\Microsof
U\AutoInstallMinorUpdates
Value: 1, 0, 0, 0
State: Enabled
GPO: Ardiya Wsus
KeyName: Software\Policies\Microsof
U\ScheduledInstallDay
Value: 2, 0, 0, 0
State: Enabled
GPO: Ardiya Wsus
KeyName: Software\Policies\Microsof
rofile\DoNotAllowException
Value: 0, 0, 0, 0
State: Enabled
GPO: Ardiya Wsus
KeyName: Software\Policies\Microsof
.0\Task Creation
Value: 1, 0, 0, 0
State: Enabled
GPO: Ardiya Wsus
KeyName: Software\Policies\Microsof
U\DetectionFrequencyEnable
Value: 1, 0, 0, 0
State: Enabled
GPO: Mobile Block Write
KeyName: Software\Policies\Microsof
eDevices\{53f5630d-b6bf-11
Value: 1, 0, 0, 0
State: Enabled
GPO: Ardiya Wsus
KeyName: Software\Policies\Microsof
U\ScheduledInstallTime
Value: 9, 0, 0, 0
State: Enabled
GPO: Ardiya Wsus
KeyName: Software\Policies\Microsof
rofile\IcmpSettings\AllowI
Value: 1, 0, 0, 0
State: Enabled
GPO: Ardiya Wsus
KeyName: Software\Policies\Microsof
rofile\IcmpSettings\AllowO
Value: 1, 0, 0, 0
State: Enabled
USER SETTINGS
--------------
Last time Group Policy was applied: 21/09/2014 at 9:55:24 PM
Group Policy was applied from: N/A
Group Policy slow link threshold: 500 kbps
Domain Name: KWT-DHW-1007016
Domain Type: <Local Computer>
Applied Group Policy Objects
--------------------------
Local Group Policy
The user is a part of the following security groups
--------------------------
None
Everyone
Local account and member of Administrators group
BUILTIN\Administrators
BUILTIN\Users
NT AUTHORITY\INTERACTIVE
CONSOLE LOGON
NT AUTHORITY\Authenticated Users
This Organization
Local account
LOCAL
NTLM Authentication
High Mandatory Level
The user has the following security privileges
--------------------------
Bypass traverse checking
Manage auditing and security log
Back up files and directories
Restore files and directories
Change the system time
Shut down the system
Force shutdown from a remote system
Take ownership of files or other objects
Debug programs
Modify firmware environment values
Profile system performance
Profile single process
Increase scheduling priority
Load and unload device drivers
Create a pagefile
Adjust memory quotas for a process
Remove computer from docking station
Perform volume maintenance tasks
Impersonate a client after authentication
Create global objects
Change the time zone
Create symbolic links
Increase a process working set
Resultant Set Of Policies for User
--------------------------
Software Installations
----------------------
N/A
Logon Scripts
-------------
N/A
Logoff Scripts
--------------
N/A
Public Key Policies
-------------------
N/A
Administrative Templates
------------------------
GPO: Local Group Policy
KeyName: Software\Policies\Microsof
ions\NC_DeleteConnection
Value: 1, 0, 0, 0
State: Enabled
GPO: Local Group Policy
KeyName: Software\Policies\Microsof
ions\NC_Statistics
Value: 1, 0, 0, 0
State: Enabled
GPO: Local Group Policy
KeyName: Software\Policies\Microsof
ions\NC_LanConnect
Value: 1, 0, 0, 0
State: Enabled
GPO: Local Group Policy
KeyName: Software\Policies\Microsof
ions\NC_RasChangePropertie
Value: 1, 0, 0, 0
State: Enabled
GPO: Local Group Policy
KeyName: Software\Policies\Microsof
ions\NC_DialupPrefs
Value: 1, 0, 0, 0
State: Enabled
GPO: Local Group Policy
KeyName: Software\Policies\Microsof
ions\NC_LanProperties
Value: 1, 0, 0, 0
State: Enabled
GPO: Local Group Policy
KeyName: Software\Policies\Microsof
ions\NC_AddRemoveComponent
Value: 1, 0, 0, 0
State: Enabled
GPO: Local Group Policy
KeyName: Software\Policies\Microsof
ions\NC_RasConnect
Value: 1, 0, 0, 0
State: Enabled
GPO: Local Group Policy
KeyName: Software\Policies\Microsof
ions\NC_AdvancedSettings
Value: 1, 0, 0, 0
State: Enabled
GPO: Local Group Policy
KeyName: Software\Policies\Microsof
ions\NC_RenameMyRasConnect
Value: 1, 0, 0, 0
State: Enabled
GPO: Local Group Policy
KeyName: Software\Policies\Microsof
ions\NC_LanChangePropertie
Value: 1, 0, 0, 0
State: Enabled
GPO: Local Group Policy
KeyName: Software\Policies\Microsof
ions\NC_AllowAdvancedTCPIP
Value: 1, 0, 0, 0
State: Enabled
GPO: Local Group Policy
KeyName: Software\Policies\Microsof
ions\NC_ChangeBindState
Value: 1, 0, 0, 0
State: Enabled
GPO: Local Group Policy
KeyName: Software\Policies\Microsof
ions\NC_NewConnectionWizar
Value: 1, 0, 0, 0
State: Enabled
GPO: Local Group Policy
KeyName: Software\Policies\Microsof
ions\NC_RasMyProperties
Value: 1, 0, 0, 0
State: Enabled
Folder Redirection
------------------
N/A
Internet Explorer Browser User Interface
--------------------------
N/A
Internet Explorer Connection
--------------------------
N/A
Internet Explorer URLs
----------------------
N/A
Internet Explorer Security
--------------------------
N/A
Internet Explorer Programs
--------------------------
N/A
C:\Users\Ihab>
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.