Domain – Issue With USB Devices on Domain PC’s

active-directorydomainusb-flash-drive

I have just recently started working at a company that has a pretty minimal set-up with their IT, there was a domain setup, but only the default GPO's were assigned within Active Directory.

Whenever Users put in a USB device they get the following
Error Message

And whenever they click on the drives it says:

*Drive Letter*\ is not accessible. Access is denied.

As if there was some kind of permissions error, however I can see no policy that would deny users access to drives, and there are no security permissions set up on the drives, it is just full access for the 'Everyone' Group.

When I log in as the domain administrator however, I can access the drive, and I have tried the following:

  1. Formatting the Drive to NTFS
  2. Formatting the Drive to FAT
  3. Opening CMD and executing "cacls Drive:\ /t /c /g Everyone:F"
  4. Made Sure that 'user config\admin templates\windows components\windows explorer\prevent access to drives from my computer'is set to not configured (And tried disabled)
  5. Going in to the Security tab and giving specific users full permissions via the administrator account.
  6. Setting to the device ownership to differnet users such as a domain user.

Help with this would be much appreciated 🙂

Best Answer

Did you look at the settings that are configured in the Default Domain Policy GPO (or any other GPO that applies to the users)? My guess is that when you do you'll see these settings enabled.

enter image description here