Disable CDROM via GPO on Windows Server 2025

Donate Us : paypal.me/MicrosoftLab

Disable CDROM via GPO on Windows Server 2025

1. Prepare

DC2501 : Domain Controller(Yi.vn) | WIN111 : Client

2. Step by step : Disable CDROM via GPO

WIN111 : Check CDROM device

DC2501 : Disable CDROM via GPO

Server manager - Tools - Active Directory Users and Computers - Yi.vn - Check 'Clients' OU

Server manager - Tools - Group Policy Management - Right-Click 'Clients'

Create a GPO in this domain, and Link it here... - Name : Disable CDROM - Right-Click 'Disable CDROM' - Edit...

Computer Configuration - Policies - Administrative Templates - System - Removable Storage Access, Enable :

CD and DVD : Deny execute access + CD and DVD : Deny read access + CD and DVD : Deny write access

Start - cmd - gpupdate /force

WIN111 : Update policy and check CDROM device

Start - cmd - gpupdate /force - Sign out - Sign in

Double-click CDROM device - Message box "Access is denied" === Ok

---------------------------********************    / microsoftlab   ********************------------------------