Consider the following scenario:

  • You have a computer that is running Windows Vista or Windows Server 2008.
  • You enable a Group Policy on the computer to deny write access or to deny read access to removable storage devices.
  • You insert a removable storage device in the computer.
  • You shut down and then restart the computer.

In this scenario, you notice that the removable storage device is disabled and you can no longer access the device after you log on to the computer. Additionally, when you open the Properties dialog box for the device, the following information is displayed under the device status:

The device is disabled. (Code 22)

If you click the Enable Device button in the Properties dialog box, the device status remains disabled.

Note: The Group Policy that is described in this scenario can be any of the following:

  • CD and DVD: Deny write access
  • CD and DVD: Deny read access
  • Floppy Drives: Deny write access
  • Floppy Drives: Deny read access
  • Removable Disks: Deny write access
  • Removable Disks: Deny read access
  • Tape Drives: Deny write access
  • Tape Drives: Deny read access
  • WPD Devices: Deny write access
  • WPD Devices: Deny read access

These Group Policy settings are available in the following path:

User Configuration\Administrative Templates\System\Removable Storage Access

Leave a Reply