USB Drives disabled when domain is Azure AD

Question

_{Sunday, August 16, 2015 9:06 PM | 1 vote}

Hello/help

We are looking to use azure ad to manage our remote offices by utilizing the feature in windows 10 that connects the computer to Azure AD for account logins. I have two machines currently setup like this and both have their USB Drives disabled under Group Policy. The string is in: GP\Administrative Templates\System\Removable Storage Access\All Removable storage calsses: Deny all access   ENABLED

Not sure why it is being enable or where it would be set. But i need to set this back to the default of Not Configured.

The removable drives show up but the access is denied.

When I change the setting on the computers it give me 300 seconds before the restart and re-apply the setting.

Any help would be awesome!

All replies (2)

_{Tuesday, August 18, 2015 10:00 AM ✅Answered}

Hi Jay Kelly,

After the changes under the group policy settings, have you performed

gpupdate /force

or logged off and then logged on again to check this issue?

Please run the gpresult /v to check and see if any other policies that need to configure.

Further, take use of Diskpart to check:

1. Start > search bar -> CMD and press enter
2. type< diskpart
3. type< list disk
4. type< select disk # (# is the number of the USB HDD you’ve pluged in)
5. type< attributes disk clear readonly

Regards

Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected].

_{Wednesday, September 7, 2016 8:26 PM}

I had the same issue on a repaired Surface3 that we had gotten back from Microsoft running Windows 10.  Resetting the registry values or setting the Local Group Policy to disable the settings only held the change until the computer rebooted. Then it was back to denying flash drives and rebooting the surface every 2 minutes when a flash drive was plugged in, and you can see the Local Group Policy change back to enabled.  

Tried under the user and administrator account with no difference. Gpresult shows that policy definitions (ADMX files) are retrieved from the local computer.

The user had logged in with a hotmail account to the surface.

I wasn't using Azure AD, but the surface was in a workgroup configuration.  Still baffled as to why I Local group policy keeps changing back.