i tried created a gpo that can block removable drive to every client that connect to domain. at first it works well, then i try to make it only affect to some users .. so i created a group with some user that won't be allowed to use removable disk on their pc.

 

i put that group in security filtering for that gpo, and remove the 'authenticated users' that added by default. Then everything screw up, all the user now can use removable disk. i tried to put back everything like before, restarting client and server, put again 'authenthicated user' back, but still this policy has not effect anymore.

 

please help how to fix this. thank you.

run a resultant group policy to specific user to see IF the the policy has been applied or not. Sometime changing permissions screws everything up.

1. If you have not removed first policy, you will not get any difference, either you have to block the inheritance or remove the top level policy