Hey everyone! I need some help with a group policy issue I'm facing. I set up a local group policy on a computer within a domain network to deny access to removable devices. I confirmed that it was working on Friday, but when the user returned on Monday, they were able to access the USB drive again, even though no one has admin rights on the machine. I double-checked the group policy settings and they seem to revert to the previous configuration. The built-in admin account is disabled, so I'm really puzzled about what could have changed. Any insights would be greatly appreciated! Thanks a lot!
2 Answers
Are you sure you're applying the GPO as a computer configuration? If you run 'gpresult /v' in an admin command prompt, does it show that the GPO has been applied properly to the computer in question? That might give you a clue if it's not working as expected.
It sounds like you're encountering issues because local group policies can be overwritten by domain settings. Instead of testing your settings locally, try creating a Group Policy Object (GPO) directly on your domain. Limit its application to a specific user or computer to avoid conflicts. Just remember, the order of policy application is: Local, Site, Domain, then Organizational Unit (OU). OU policies take precedence and can override others, so keep an eye on those configurations!
That makes sense! I had set up a denial in the default domain policy too, but it seems like it didn't apply correctly.
Just curious, does user configuration override computer configuration? I initially set it to apply only to computer settings.
Yes! I check it, and I'm getting the access denied pop-up when I try to plug in a drive, so I know the GPO is active.