Your network contains an Active Directory domain named contoso.com.
A Group Policy object (GPO) named LaptopSecurity is linked to an organizational unit (OU) named Laptops.
A corporate policy states that users who use a laptop computer are forbidden from using removable media.
You configure LaptopSecurity to prevent the users from installing removable devices on their laptop.
A user named User1 cannot install removable devices. However, User1 can read and execute applications from a removable device that the user used before you configured the GPO.
You need to ensure that the users cannot access any removable devices, even if the driver for the removable media was installed already on their laptop.
Which Removable Storage Access setting should you modify?
To answer, select the appropriate setting in the answer area.
Hot Area:
Correct Answer:
Explanation/Reference:
You can use this procedure to restrict the ability of your users to both read and write to or from any removable device that falls into the following categories:
* CD and DVD drives. This type of drive uses removable media.
* Floppy disk drives. This type of drive uses removable media.
* Removable drives. This type of drive is an external drive connected to the computer using a USB or IEEE 1394 connection. It includes both hard disk drives and flash memory drives.
* Tape drives. This type of drive uses removable media.
* Windows Portable Devices. This type of device includes media players, smart phones, and so on.
To deny all access to removable devices (See step 4 below.)
1. Open the Group Policy Management Editor. To do so, click Start, and then in the Start Search box, type mmc gpedit.msc.
2. In the navigation pane, open Local Computer Policy. Then do one of the following:
If you want the policy to affect all users on the computer, open Computer Configuration in the navigation pane.
If you want the policy to affect only the currently logged on user, open User Configuration in the navigation pane.
3. Continue by opening the following folders: Administrative Templates, System, and Removable Storage Access.
4. In the details pane, double-click All Removable Storage classes: Deny all access.
5. Click Enabled.
6. Click OK to save your changes.
Reference: Deny All Access to Removable Devices or Media
https://technet.microsoft.com/en-us/library/cc772540%28v=ws.10%29.aspx
