I created a limited user account and want to restrict USB and CD drive access using group policy settings. Hence I want to use gpedit.msc to enforce restrictions on the limited account and disable access to USB and CD drive, and prevent the limited account from modifying those changes. How can I achieve this without restricting any other accounts?
Apply Group Policy Settings to Specific Local Accounts in Windows
group-policylimited accessuser-accountswindows 7
Related Solutions
I was able to find the answer after some searching around, this answer is from this question in Server Fault, posted by San Jac.
I had the same issue by accidentally changing system settings in gpedit. Try this fix I got from Greylox.... It worked for me.
Open "Run" & enter
%systemroot%\system32\GroupPolicy\UserDelete
registry.pol(if it exists).Go to
%systemroot%\system32\GroupPolicy\Machineand deleteregistry.pol(if it exists).Reboot your system.
Log in using your administrator account & create a new administrator account.
Reboot the computer & login as under new administrator account.
Open "Run" & enter
gpedit.mscGo to "Local Computer Policy" → "User Configuration" → "Administrative Templates" → "system" → "Run only specified Windows applications" (as shown below) & disable it.
- Run
gpupdate /forceand login with your old administrator account.
Best Answer
In Windows Vista and later you can apply policies only to a specific account, but you have to load the group policy object editor from the Microsoft Management Console, not by opening the snapin directly.
Click the "users" tab and select a user.
You will now have a group policy user object for the selected user. Apply whatever restrictions you want. You may be interested in checking out "Hide these specified drives in My Computer" in
User Configuration > Administrative Templates > Windows Components > Windows Explorer.