Dear All, we have windows2008 server two numbers it has ADS ,DNS GPO both DC RW . now i have a problem i had restricted some groups deny local login every branches local PC . But i couldn't login all domain users even domain administrator rights also users . Regards Subash

Hello, where did you configure this setting exactly, to which OU is it linked?Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

Dear Boss, I have created USB and CDrom Adm files policy . it has been link with all OU.

Hi Subash, If you’d like to restrict some users from using USB and CD-ROM, please create a new GPO and link it only to the OU that only contains users you want to restrict. HOWTO: Use Group Policy to disable USB, CD-ROM, Floppy Disk and LS-120 drivers http://support.microsoft.com/kb/555324/en-us If this does not address your problem, please let us know more information about your purpose. Regards, Bruce

you Can also create a group with all those users as members of it and filter GPO security settings now allow this new group to have allow rights and in this way, only this group will have access to this GPO and this gpo will only be applied to the members of this group.MCSE Certified

Hi Subash, If you’d like to restrict some users from using USB and CD-ROM, please create a new GPO and link it only to the OU that only contains users you want to restrict. HOWTO: Use Group Policy to disable USB, CD-ROM, Floppy Disk and LS-120 drivers http://support.microsoft.com/kb/555324/en-us If this does not address your problem, please let us know more information about your purpose. Regards, Bruce