Group Policy Allowing certain USB stick but Deny ALL other USB devices?
Is this possible?
I have "Allow installation of devices that match any of these device IDs" enabled. How do I disable all other USB devices?
Thank you!
How do I get customer support to actually help me instead of telling me to do things that I have already done or that I know are pointless or that have nothing to do with my problem?
Similar Messages
-
Group Policy for Desktop background applied but showing black desktop in the client end
Trying to set wallpaper in group policy but it's coming up blank.We have windows 2008 and 2012 server.most of the computer is windows 7.
Hi,
Does this issue occur to all computers?
Besides, can the users access the wallpaper?
If this issue just happens to Windows 7, we can try applying the hotfix in the following article.
The "Desktop Wallpaper" Group Policy setting is not applied in Windows 7 or in Windows Server 2008 R2
http://support.microsoft.com/kb/977944/en-us
If the issue persists, we can refer to the following thread to troubleshoot the problem.
Black Desktop wall paper after implementing group policy
http://social.technet.microsoft.com/Forums/windowsserver/en-US/0c36d7bf-4694-46e1-b408-d644111c0264/black-desktop-wall-paper-after-implementing-group-policy?forum=winserverGP
Best regards,
Frank Shen -
Question: Acrobat 8.0 crashes when combining certain JPG files but not some other set of JPG files. why this is happening. Please help.
IT may be a bug. It may be fixed in Acrobat 9, 10 or 11.
-
I bought a camera connection kit. First time it worked fine, using the USB connector, but now neither the USB nor SD connector works. The iPad shows a connector is attached, but Photos doesn't open. Any ideas? thanks
If you have not done so, try exiting the Photo app (and maybe more apps if you have a lot open) from the Open Apps List and see if a discount/reconnect opens the app. If that does not work, try powering down the iPad and test. If it is still not working try a hard reset by pressing both Home and Sleep/Wake buttons at the same time until the Apple graphic appears, ignoring the Slide to Power Off button.
-
Laptop is unable to detect my home router wifi network but detecting all other neighbour networks
My pavilion g6 laptop is unable to detect my home router wifi network but detecting all other neighbour networks even my phone network also. The same router network is detecting good in another laptops.
Hi , Welcome to the HP Forums! It is a great place to find answers and information!
For you to have the best experience in the HP forum I would like to direct your attention to the HP Forums Guide. Learn How to Post and More i understand that your notebook finds and displays many network but not yours but another laptop does locate it. One of the easiest steps to try is to reset the router by removing power for approximately 20 seconds and then reconnecting the power. Give the router time to reset and come back up . Does you network now show? If your network is set to 5.0 GHz try changing the setting to mixed mode or 2.4 GHz as that is the best selection for HP notebooks. Here is a link to HP PCs - Troubleshooting Wireless Network and Internet (Windows 8). To say thanks for replying, please click the thumbs up icon below. If this overcame your difficulty please tell people by selecting solution provided to allow it to found with greater ease. Best of Luck! -
Shuffle causes Windows to stop recognizing all other USB ports!?!
When I plug my new Shuffle in to any USB Port, Windows stops recognizing all other USB drives. (this includes my internet connection and external hard drive with all music) If I disconnect the Shuffle and repower the other devices, they work normally again. I've seen this same problem on this forum and the answer did not help - here is the answer/link given the previous posting: http://docs.info.apple.com/article.html?artnum=93499
The shuffle has its own drive letter on my computer, so no conflict here AND my husband's shuffle works just fine on this same usb port and same cradle. As soon as I eject the working shuffle and place the new one in the cradle, my computer shuts down and no other USB Ports work until I unplug the shuffle and repower the others. Maybe a shuffle problem?
Thanks for your help!The shuffle has its own drive letter on my computer,
so no conflict here AND my husband's shuffle works
just fine on this same usb port and same cradle. As
soon as I eject the working shuffle and place the new
one in the cradle, my computer shuts down and no
other USB Ports work until I unplug the shuffle and
repower the others. Maybe a shuffle problem?
Thanks for your help!
Are you "eject"ing your husband's shuffle in iTunes OR are you "safely removing hardware" in Windows? -
How can I create an iCloud account if I have iTunes on my PCs (both desktop & laptop) but have no other iOS device?
http://https://ci6.googleusercontent.com/proxy/0pvg0cE2YuFQ5ZaqwDNORf8TKnYmWkUdN BSVpRgn2lNMR_03qYeKN64jE6LXbMOJBBCc7agiJIAYFvS28j7y-UiLaBMdhM2t7I79q8mQsl5T5aMj7 dBPHFU2Za204sZnDh5muA=s0-d-e1-ft#http://ax.phobos.apple.com.edgesuite.net/email/ images_shared/spacer_999999.gif
-
Two of our ipod touches won't connect to the home wifi. They have done before. All other apple devices connect fine. They can see the wifi devices, appear to try to connect (the circle whirls around) but connection doesn't complete. Ideas please?
I have 2 of them that only connected for a day and then reset network settings and they connected again for a day now resetting network settings does not fix it either. My iphone used to work with my home network but after upgrading to the latest OS which is the same versions as the ipods it no longer works either. Acts the same as the ipods. It would seem that the latest tweeks to the OS is the problem with wifi connectivity.
-
Group Policy Preferences File Copy - Access is Denied on 2003 but not 2008 R2
Hello,
I have created a GPO which copies a file from a network share into a new folder under Program Files. This policy works just fine on a Windows 2008 box, but not on 2003. I've used "psexec -i -s cmd.exe" to verify system account permission to the
share. I am able to successfully browse and copy files from the share as the system account on both boxes.
However, when the GPO attempts to perform the file copy, it does not work, and generates the following error message:
Event Type: Warning
Event Source: Group Policy Files
Event Category: (2)
Event ID: 4098
Date: 8/28/2013
Time: 3:32:12 PM
User: NT AUTHORITY\SYSTEM
Computer: Server01
Description:
The computer 'file.txt' preference item in the 'TXT File Copy {9176122B-1A50-4AB8-91D9-6E8553727E18}' Group Policy object did not apply because it failed with error code '0x80070005 Access is denied.' This error was suppressed.
I am trying to avoid writing a login script, so I am hoping someone will be able to help me figure out why this works fine on Windows 2008 but not Windows 2003. Please note file names and paths are modified here for security reasons, but the principle is
the same.
My GPO is:
Computer Configuration\Preferences\Windows Settings\Files
File (Target Path: c:\Program Files\path\to\file\file.txt)
Source file: \\share\path\to\file\file.txt
Destination File: c:\program files\path\to\file\file.txt
Action: Update
Suppress errors on individual file actions: Disabled
Read-Only: Enabled
Hidden: Disabled
Archive: Enabled
Stop Processing items on this extension if an error occurrs on this item: No
Remove this item when it is no longer applied: No
Apply once and do not reapply: No
Item-level Targeting: None
ThanksAs a user, I am able to browse the share just fine using the alias. It is only when I try to access the share using the system account that I encounter a problem.
experiencing the exact same symptoms. in the tests below, server, client1, and client2 are all are native instances of microsoft windows server.
server: windows server 2008 R2 standard SP1
client1: windows server 2003 standard SP2
client2: windows server 2008 R2 standard SP1
registry setting "DisableLoopbackCheck": unconfigured on server; unconfigured on client1; unconfigured on client2
registry setting "DisableStrictNameChecking": configured as "1" on server; unconfigured on client1; unconfigured on client2
domain user on client1 attempt to access server by name: success
domain user on client1 attempt to access server by alias: success
domain user on client2 attempt to access server by name: success
domain user on client2 attempt to access server by alias: success
local system on client1 attempt to access server by name: success
local system on client1 attempt to access server by alias: failed (system error 5 has occurred. access is denied.)
local system on client2 attempt to access server by name: success
local system on client2 attempt to access server by alias: success
all tests done using "net view \\target", but similar results were seen when using "dir \\target\share" which the domain user and local system account have access to.
the differing behavior between client1 and client 2 suggests that server 2003 requires additional configuration to allow its local system account to access an SMB share by alias.
this problem prevents group policy features (such as software installation) from an aliased file server. -
Group Policy client Service Error - Access is denied
I am
at domain admin working on windows 7 roaming profiles, testing with a
staff user. I am in a domain environment. I have changed the
profile path for a user to the folder I created for new windows 7 roaming
profiles. gave it all the permissions noted here and followed these steps
at Microsoft's deploying roaming profiles page for win 7.<o:p></o:p>
once I logged in the user,
it created their profile.v2 but I still couldn't access it. getting
access denied. so I went back and changed the staff roaming profile back
to the original profile path. didn't make any group policy changes.
but now she gets group policy client service failed to logon. access is
denied. I have deleted the .v2 profile that win 7 creates in her old
profile path, moved her profile path back to what is was before testing,
retested her xp profile which does work and she can login and work.
but the win 7 machines no matter where she logs in, will not work. they
all give the same error about group policy client service failed. no
other users are having this problemHi,
Regarding the issue here, have you checked the below thread?
Group
Policy Client Service Failed the logon - Access Denied: Windows 7 Ultimate/Server 2008 R2
Please take a try with the steps mentioned by Nina Liu.
QUOTE here:
At this time, let’s refer to the following steps for troubleshooting:
1. Open registry editor on the problematic Windows 7 machine (please log in as domain admin)
2. Highlight HKEY_USERS, choose File -> Load Hive, browse to the location of one failing roaming profile and open NTUSER.DAT file, click open
3. Under Key Name, enter any name you like, but remember what you have entered, such as enter "test"
4. Expand, HKEY_USERS, you should see new registry hive called "test" or any name you entered earlier
5. Right click on that "test" hive and choose permissions. Confirm that the following users have permissions:
- Administrators: Full Control
- SYSTEM: Full Control
- User (or group) that owns this profile: Full Control
6. If the permissions were wrong, correct them, then click on Advanced tab, on Advanced tab and enable "Replace permission entries on all child objects with entries
shown here that apply to child objects" and click Apply.
7. Highlight "test" registry hive, then click on File -> Unload Hive to release handle on NTUSER.DAT file.
8. Log off and log on with the failing roaming profile you have just modified.
Any process, please feel free to contact us.
Best regards
Michael Shao
TechNet Community Support -
Upgraded to osx lion via bootable USB stick but start up now just hangs on the grey apple screen
Hi. I've just recently upgraded from snow leopard to osx lion 10.7.3 on my laptop and it works perfectly! However I then tried installing on desktop and problems......
1. I got the 'the error can't install message' so after researching' I made a bootable USB stick with lion on it.
2. Installed on start up from bootable USB stick, no problems their.
3. Restarted and it just hangs in the grey apple screen.
I've reset the PRAM, started in safe mode, fixed disk permission etc, Even done this (http://hints.macworld.com/article.php?story=20070204093925888).
I'm going to leave the grey screen over night to see if it does start up, but then we have the problem of an extremely slow start up.
So.... I am posting this to find out if anyone else has this problem and fixed it without having to do a full clean install as some data like email lists etc I never backed up (I know stupid).
Hope someone can help as i am lost on what else to try.
HELP!?!?!?
Dan.Update 01.03.12
Computer is starting now but.... It takes 10 minutes and that is without my sound card, hardware and external hard drives plugged in, gonna test that now.
Are their and fixes for slow start ups?
Dan. -
Deploying software through group policy with certain requirements
here is the question:
I have an existing Active Directory environment, consisting of 300 computers. we need to install the latest version of ADOBE ACROBAT READER to all computers with the following requirements:
. The application is not supported on windows XP
. We need to have automatic updates turned off within the application
. We need a silent, automatic installation.
. The Engineer Department needs to be excluded, as they use Proprietary PDF app.
Is is possible to deploy thru Group Policy and meet all these so called requirements ?Hi,
Before going further, I agree with Zanderol24.
>>
The application is not supported on windows XP
We can use a WMI filter to exclude Windows XP clients from applying the software installation policy.
Regarding WMI filter, the following article can be referred to for more information.
WMI filtering using GPMC
http://technet.microsoft.com/en-us/library/cc779036(v=ws.10).aspx
Regarding how to use WMI filter to filter out Windows XP, the following article can be referred to as reference.
Create WMI Filters for the GPO
http://technet.microsoft.com/en-us/library/cc947846(v=ws.10).aspx
>>We need to have automatic updates turned off within the application
For this is related to the software, we can contact vendor support to ask for suggestions.
>>We need a silent, automatic installation.
We can choose to assign a program distribution to users or computers.
If we assign the program to a user, it is installed when the user logs on to the computer. When the user first runs the program, the installation is completed.
If we assign the program to a computer, it is installed when the computer starts, and it is available to all users who log on to the computer. When a user first runs the program,
the installation is completed.
Regarding how to use Group Policy to remotely install software, the following article can be referred to for more information.
How to use Group Policy to remotely install software in Windows Server 2008 and in Windows Server 2003
http://support.microsoft.com/kb/816102/en-us
>>The Engineer Department needs to be excluded, as they use Proprietary PDF app.
If we choose to assign the software to computers, we have to filter out computer accounts for the Engineer Department from applying the software installation policy. If we
choose to assign the software to users, we have to filter out user accounts for the department. We can use security filtering to do this.
Regarding security filtering, the following articles can be referred to for more information.
Security filtering using GPMC
http://technet.microsoft.com/en-us/library/cc781988(v=ws.10).aspx
Filter Using Security Groups
http://technet.microsoft.com/en-us/library/cc752992.aspx
Best regards,
Frank Shen -
Windows 7 doesn't release USB stick - can't safely remove USB stick
Sometimes when I'm trying to safely remove an USB stick formatted with NTFS from any Windows 7 installation, Windows 7 refuses to release the USB device.
This occurs on host machines as well as on VM guest machines. When I'm attaching the USB stick to a virtual machine (VMware Workstation) and when this effect occurs in there I can see from Workstation's device manager that the USB stick is getting accessed
once every (approx.) five seconds. The USB stick shortly flashes up accordingly then, so there is indeed some access to the USB stick.
Now, this doesn't happen all the time. This effect only occurs, say once or twice a week.
Waiting for 5 to 10 Minutes, the low-frequent regular short flashing finally stops and I can safely remove my USB stick then.
Well, what I want to know: Which Windows service is sometimes accessing my USB stick in this manner?
This happens on several machines, some of them having almost no software installed.
When exploring the file handles with SysInternals Process Explorer, there's only a Windows Explorer handle attached to the USB device.
I suspect it might either be Windows Defender (having Search Removable Devices enabled), Windows Search or Windows Defragment. But this is only a guess.
Can anyone please enlighten me on which service is capturing my USB device for such a long time, keeping me from safely removing the USB device?
Microsoft Marketing should care for customer feedback on their consumer products, e.g.
Windows & Office.
Have had Windows 8 … went back to Windows 7.Hi,
We can use USB parser in WDK8 or 8.1.
To install USB ETW parsers:
1.Determine whether you have 32-bit Windows or 64-bit Windows: ◦Open the Start Menu.
◦Right click Computer and select Properties.
◦Look at the System type field. (Note: 32-bit corresponds to “x86” for the downloads).
2.Install Netmon:
◦Go to the bottom of the Quick details on the Netmon 3.4 download page and press the Download button for your system type.
◦Download and run the exe. When it asks about setup type, Typical is fine.
3.Download and install the Windows Driver Kit for Windows 8.
4.Allow execution of PowerShell scripts:
◦Open the Start screen, type "powershell", right click on the Windows PowerShell result, and select Run as administrator.
◦Type or paste the following command:
Set-ExecutionPolicy RemoteSigned -Force
4.Close the PowerShell window
5.Open a PowerShell window (you don't need to Run as administrator) and run the following commands. Adjust the path if you installed the kit to a different location:
cd "C:\Program Files (x86)\Windows Kits\8.0\Tools\x86\Network Monitor Parsers\usb"
..\NplAutoProfile.ps1
Now you're set up! You can now launch Netmon and open an .etl trace by selecting File -> Open -> Capture.
You can also use OneDrive to upload the trace file in forum so that we can help you analyze your problem.
If you have any feedback on our support, please click
here
Alex Zhao
TechNet Community Support -
Boot Camp destroyed my USB-Stick., Boot Camp destroyed my USB-Stick.
After starting BOOT CAMP ASSISTANT and tricking all of the tree buttons, I continued everything. I selected my USB-Stick and the WINDOWS 7 file I started the program. Then Boot Camp Assistant says that the USB-Stick does not work. So I opened the Disk Utility, and I cloud not find my USB-Stick.
Pleas give me some advice how to repaire or run my USB-Stick again
Thank you IMAC MAXIt is free. It is beta. It works well - I use it on mine and two PCs as well...
MS Security Essentials will no longer install due to compatibiliity issues - that is the idea of a beta - and the RC could be out in June.
Windows 7 doesn't work great on any Mac, or Apple drivers, fan cvontrol to manage heat, and other issues.
Put 8 in and get to know it, then when the RC comes out you'll be ready -
Why won't Firefox 3.6.17 on Mac load certain web pages but will load others?
I'm using Firefox 3.6.17 on Mac (10.4.11), can anyone explain why I cannot access Yahoo, Google, Cnn, Bing, but can access other sites? Those web pages starts to load, then display (Untitled) in tab with a blank page. I have cleared everything in my cache and cookies and reinstalled Firefox and nothing helps. This problem started a few days ago and previously there was no problem and I didn't make any changes to Firefox. Thanks for the help.
Found a solution to the problem. The permissions for the firefox.app file were not set to admin - read-write. After adding this permission using the get info menu item when right clicking the file name in the applications folder, the tab now automatically opens when clicking on Email link.
Maybe you are looking for
-
My ipod touch 4g 5.0.1 will not connect to tv, will not display picture. Also keep getting a message sayin this accesory is not supported with ipod touch. How do i get this to work and stop getting this message? Please help.
-
Novice EJB2 to EJB3 Conversion Question
I would like to convert my stateless remote session beans to EJB3 using annotations. Can this be done incrementally? My first attempt, after adding the appropriate annotations, was to comment-out the session element for one of my beans in the ejb-jar
-
What is the architecture of iplanet Directory Server Integration Edition tool?
-
Can not delete an Event in the iMovies Library
I have tried eveything, move event to trash via File>or Control>click etc...I have OS X Mavericks. Also, I can not import anything to this [email protected] Message was edited by: 1mansideshow
-
My I phone 4 switched off and cant turn on again, My I phone 4 switched off and cant turn on again, what could be the problem?