none
GPO in Active Directory, Removable Storage Settings are not Effective Under User Settings

    Question

  • I have a 2008 R2 domain. The Removable Storage Device Settings will work fine if I define them under computer configuration but not under User Settings.

    Is it a normal shortcoming of GPO?

    Please refer the gpresult output below.

    ----------------------------------------------------------------------------------------------

    Microsoft (R) Windows (R) Operating System Group Policy Result tool v2.0
    Copyright (C) Microsoft Corp. 1981-2001
    Created On 2/11/2015 at 1:55:14 PM
    RSOP data for MYDOMAIN\ADMIN on 2008-CLIENT : Logging Mode
    -----------------------------------------------------------

    OS Configuration:            Member Server
    OS Version:                  6.1.7601
    Site Name:                   Default-First-Site-Name
    Roaming Profile:             N/A
    Local Profile:               C:\Users\ADMIN.MYDOMAIN
    Connected over a slow link?: No


    COMPUTER SETTINGS
    ------------------
        CN=2008-CLIENT,OU=PAS-Windows 2008,OU=MYOFFICE,DC=MYDOMAIN,DC=NET
        Last time Group Policy was applied: 2/11/2015 at 12:25:43 PM
        Group Policy was applied from:      DC-1.MYDOMAIN.NET
        Group Policy slow link threshold:   500 kbps
        Domain Name:                        MYDOMAIN
        Domain Type:                        Windows 2000

        Applied Group Policy Objects
        -----------------------------
            Default Domain Policy
            Local Group Policy

        The following GPOs were not applied because they were filtered out
        -------------------------------------------------------------------
            MYDOMAIN Removable Device Policy Users
                Filtering:  Disabled (GPO)

        The computer is a part of the following security groups
        -------------------------------------------------------
            BUILTIN\Administrators
            Everyone
            BUILTIN\Users
            NT AUTHORITY\NETWORK
            NT AUTHORITY\Authenticated Users
            This Organization
            2008-CLIENT$
            Domain Computers
            System Mandatory Level
            

    USER SETTINGS
    --------------
        CN=ADMIN,CN=Users,DC=MYDOMAIN,DC=NET
        Last time Group Policy was applied: 2/11/2015 at 1:53:11 PM
        Group Policy was applied from:      DC-1.MYDOMAIN.NET
        Group Policy slow link threshold:   500 kbps
        Domain Name:                        MYDOMAIN
        Domain Type:                        Windows 2000
        
        Applied Group Policy Objects
        -----------------------------
            MYDOMAIN Removable Device Policy Users

        The following GPOs were not applied because they were filtered out
        -------------------------------------------------------------------
            Default Domain Policy
                Filtering:  Not Applied (Empty)

            Local Group Policy
                Filtering:  Not Applied (Empty)

            
        The user is a part of the following security groups
        ---------------------------------------------------
            Domain Users
            Everyone

    Thursday, February 12, 2015 4:44 AM

Answers

  • Final Result:

    The user settings are effective only when we use client OS such as Windows 7 and not for server OS.

    • Marked as answer by avilt Tuesday, March 17, 2015 2:33 PM
    Tuesday, March 17, 2015 2:33 PM

All replies

  • Hi,

    From the report, we see that the GPO is applied, but we don't see the specific setting. Here, please run command gpresult/h report.html to collect group policy result to double check if the policy setting is applied successfully. Besides, we see that the user account is domain admin. Here, please try a standard user account to have a check. 

    Best regards,

    Frank Shen


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Friday, February 13, 2015 8:42 AM
    Moderator
  • I have tried with normal user account as well no change in the results.

    I have tried RSOP from the DC for a particular user, the settings are reflected.

    Friday, February 13, 2015 8:47 AM
  • Final Result:

    The user settings are effective only when we use client OS such as Windows 7 and not for server OS.

    • Marked as answer by avilt Tuesday, March 17, 2015 2:33 PM
    Tuesday, March 17, 2015 2:33 PM