I have two computers in an office. User A is on computer A and user B is dedicated to computer B.
I had locked the users out of being able to write to CDs and other removable drives, and now I need to unlock. I changed the policy and ran GPUpdate (even tried /force) on each station and I'm unable to get the policy to update for these users.
Create a new profile on each computer that isn't that user and I get the permissions I'm looking for.
Log User B into computer A for the first time ever (and visa versa) and they get the permissions sent to them correctly.
So I see that the permissions are correct, but for some reason, each user can't have their permissions updated on their workstations.
I've tried removing the user via logging in as an administrator on their workstation and killing the profile in the User Profiles tool, then removing their home directories. And while the user did propagate back on the workstation, they still have the bum permissions.
How can I force a flush and reset of these permissions?
The server is 2012 and the workstations are 7.