J
Just_Tim
Guest
I'm seeing some strange behavior with the Removable Disks - Deny read/write access GPO.
On certain hardware models, who have in common that they are equipped with an NVME SSD, like a Lenovo T470, this policy seems to block a device called "Generic- SD/MMC USB Device" causing the OS to display a lot of errors upon login with the description "There is no disk in the drive. Please insert a disk into drive D:". There also is an unexpected visible D: drive which cannot be accessed.
Looking at disk management, this device is called "Generic- SD/MMC USB Device".
Just to be clear, there is nothing connected to the notebook at that point.
If I login with an admin account, these errors do not occur, and the D: drive is also invisible.
Could it be that this policy incorrectly blocks something it shouldn't?
I have tried blocking USB Mass storage devices using the Class GUID, but this didn't work at all.
I'm just trying to accomplish blocking USB devices for regular users but allowing them for admins.
More...
On certain hardware models, who have in common that they are equipped with an NVME SSD, like a Lenovo T470, this policy seems to block a device called "Generic- SD/MMC USB Device" causing the OS to display a lot of errors upon login with the description "There is no disk in the drive. Please insert a disk into drive D:". There also is an unexpected visible D: drive which cannot be accessed.
Looking at disk management, this device is called "Generic- SD/MMC USB Device".
Just to be clear, there is nothing connected to the notebook at that point.
If I login with an admin account, these errors do not occur, and the D: drive is also invisible.
Could it be that this policy incorrectly blocks something it shouldn't?
I have tried blocking USB Mass storage devices using the Class GUID, but this didn't work at all.
I'm just trying to accomplish blocking USB devices for regular users but allowing them for admins.
More...