Microsoft Knowledge Base Article
This article contents is Microsoft Copyrighted material.
©2005-©2007 Microsoft Corporation. All rights reserved.
Terms
of Use |
Trademarks
Article ID: 2214863 - Last Review: August 18, 2010 - Revision: 1.0
The Removable Storage Access policy does not work correctly on a client computer that is running Windows Vista or Windows Server 2008
If you attach a removable storage device to a computer during the period between system start and user logon, the Removable Storage Access policy may not function correctly. This can occur with Windows Vista and Windows Server 2008, and happens regardless of whether Microsoft Knowledge Base hotfix KB969702 is installed or not.
The fix included in Microsoft Knowledge Base article KB969702 is for Windows Portable Devices (WPD) such as USB flash memory, so the policy does not apply for other devices such as USB hard disk drives. This symptom above occurs because some service processes may be accessing the device before the group policy is applied, and this may prevent the policy being applied to the device.
You can choose one of the following workarouds:
1. UseÂ
Computer Configuration instead of
User Configuration to set group policy.
 Â
Note: if you use the
Computer Configuration policy, all users who use the computer will be restricted.
2. UseÂ
User Configuration policy and force reboot the system by the "Time (in seconds) to force reboot" policy.
1. Set "Time (in seconds) to force reboot" policy under "
User Configuration\Administrative Template\System\Removable Storage Access"
  2. Add the following registry entry:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WPDBusEnum
  RequiredPrivileges (REG_SZ) "SeShutdownPrivilege"
You also need to install Microsoft Knowledge Base hotfix KB979621 to avoid the device being disabled.
 A removable storage device is disabled when you enable a Group Policy to deny write access
 or to deny read access to the device on a computer that is running Windows Vista or Windows Server 2008
Â
http://kbalertz.com/Feedback.aspx?kbNumber=979621/
(http://kbalertz.com/Feedback.aspx?kbNumber=979621/en-us)
Note This is a "FAST PUBLISH" article created directly from within the Microsoft support organization. The information contained herein is provided as-is in response to emerging issues. As a result of the speed in making it available, the materials may include typographical errors and may be revised at any time without notice. See
Terms of Use
(http://go.microsoft.com/fwlink/?LinkId=151500)
for other considerations.
APPLIES TO
- Windows Vista Business
- Windows Vista Enterprise
- Windows Server 2008 Datacenter
- Windows Server 2008 Enterprise
- Windows Server 2008 Standard
Community Feedback System
Very often, it takes hours to solve a problem. Very often, you've looked high
and low, and have tried a lot of solutions. When you finally found it, chances
are, it was because someone else helped you. Here's your chance to give back.
Use our community feedback tool to let others know what worked for you and what
didn't.
Please also understand that the community feedback system is not warranted to be
correct, it's simply a system that we've built to let people try and help each
other. If something in a feedback response doesn't make sense to you, or you're
not comfortable making changes that the feedback talks about (like registry
edits), please consult a professional.
Thank you for using kbAlertz.com Feedback System.
-- Scott Cate