Windows policy settings: overriding machine settings for specific user
- by Ophir Yoktan
I want use windows policy setting to limit access to removable media.
This can be done by setting
[HKEY_USERS\<uid>\SOFTWARE\Policies\Microsoft\Windows\RemovableStorageDevices]
"Deny_All"=dword:00000001
for limiting a specific user
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\RemovableStorageDevices]
"Deny_All"=dword:00000001
for all users on the machine.
I'm looking for a method to limit all users, with the exception of one specific local user.
However, the limitation appears to be additive - there is no way (that I know of) to define an exception for a specific user.
Is there some kind of alternative?