Question : CD not accessible

Having a very strange problem on corperate LAN.

Some users (randomlly - including one person in IT) is unable to access this CD drive. They get a message from Windows Explorer saying "D:\ is not accessible. Access is diened". We are completely stumped.

Each department is divided into their own OU's. It affects some users in a given OU and not others! For example I can access my CD (on laptop) but my desktop person cant (desktop).

This is the default Domain Policy:
Default Domain Policy
Data collected on: 4/28/2007 12:56:23 PM
Computer Configuration (Enabled)
Windows Settings
Security Settings
Account Policies/Password Policy
Policy Setting
Enforce password history 5 passwords remembered
Maximum password age 90 days
Minimum password age 0 days
Minimum password length 6 characters
Password must meet complexity requirements Enabled
Store passwords using reversible encryption Disabled

Account Policies/Account Lockout Policy
Policy Setting
Account lockout duration 3 minutes
Account lockout threshold 6 invalid logon attempts
Reset account lockout counter after 3 minutes

Account Policies/Kerberos Policy
Policy Setting
Enforce user logon restrictions Enabled
Maximum lifetime for service ticket 600 minutes
Maximum lifetime for user ticket 10 hours
Maximum lifetime for user ticket renewal 7 days
Maximum tolerance for computer clock synchronization 5 minutes

Local Policies/Security Options
Network Security
Policy Setting
Network security: Force logoff when logon hours expire Disabled

Public Key Policies/Autoenrollment Settings
Policy Setting
Enroll certificates automatically Enabled
Renew expired certificates, update pending certificates, and remove revoked certificates Disabled
Update certificates that use certificate templates Disabled
 

Public Key Policies/Encrypting File Systemhide
Properties
Policy Setting
Allow users to encrypt files using Encrypting File System (EFS) Enabled

Certificates
Issued To Issued By Expiration Date Intended Purposes
Administrator Administrator 10/11/2004 9:01:28 AM File Recovery

For additional information about individual settings, launch Group Policy Object Editor.
Public Key Policies/Trusted Root Certification Authorities
Properties
Policy Setting
Allow users to select new root certification authorities (CAs) to trust Enabled
Client computers can trust the following certificate stores Third-Party Root Certification Authorities and Enterprise Root Certification Authorities
To perform certificate-based authentication of users and computers, CAs must meet the following criteria Registered in Active Directory only

Administrative Templates
System/Group Policy
Policy Setting
Group Policy refresh interval for computers Enabled
This setting allows you to customize how often Group Policy is applied
to computers. The range is 0 to 64800 minutes (45 days).
Minutes: 15
 
This is a random time added to the refresh interval to prevent
all clients from requesting Group Policy at the same time.
The range is 0 to 1440 minutes (24 hours)
Minutes: 5
 
Policy Setting
Group Policy refresh interval for domain controllers Enabled
This setting allows you to customize how often Group Policy is applied
to domain controllers. The range is 0 to 64800 minutes (45 days).
Minutes: 5
 
This is a random time added to the refresh interval to prevent
all clients from requesting Group Policy at the same time.
The range is 0 to 1440 minutes (24 hours)
Minutes: 0
 

System/Remote Assistance
Policy Setting
Offer Remote Assistance Enabled
Permit remote control of this computer: Allow helpers to remotely control the computer
Helpers:
INTRUSTADS\Domain Admins
 
Policy Setting
Solicited Remote Assistance Enabled
Permit remote control of this computer: Allow helpers to remotely control the computer
Maximum ticket time (value): 30
Maximum ticket time (units): Days
Method for sending e-mail invitations: Mailto
 

Windows Components/Terminal Services
Policy Setting
Allow users to connect remotely using Terminal Services Enabled
Remove Disconnect option from Shut Down dialog Disabled
Remove Windows Security item from Start menu Disabled
Sets rules for remote control of Terminal Services user sessions Enabled
Options: Full Control with user's permission
 

Windows Components/Windows Update
Policy Setting
Configure Automatic Updates Enabled
Configure automatic updating: 4 - Auto download and schedule the install
The following settings are only required
and applicable if 4 is selected.
Scheduled install day:  0 - Every day
Scheduled install time: 03:00
 
Policy Setting
Specify intranet Microsoft update service location Enabled
Set the intranet update service for detecting updates: http://INT
Set the intranet statistics server: http://INT
(example: http://IntranetUpd01)
 

Extra Registry Settings
Display names for some settings cannot be found. You might be able to resolve this issue by updating the .ADM files used by Group Policy Management.

Setting State
Software\Policies\TerraNovum\EZ_GPO\Control Verify
Software\Policies\TerraNovum\EZ_GPO\MajorVersion 2
Software\Policies\TerraNovum\EZ_GPO\MinorVersion 0
Software\Policies\TerraNovum\EZ_GPO\SettingsScheme Simple
Software\Policies\TerraNovum\EZ_GPO\Simple\ACMachHibernateIdleTime 0
Software\Policies\TerraNovum\EZ_GPO\Simple\ACUserMonIdleTime 10
Software\Policies\TerraNovum\EZ_GPO\Simple\ACUserStandByIdleTime 0
Software\Policies\TerraNovum\EZ_GPO\Simple\DCMachHibernateIdleTime 0
Software\Policies\TerraNovum\EZ_GPO\Simple\DCUserMonIdleTime 10
Software\Policies\TerraNovum\EZ_GPO\Simple\DCUserStandByIdleTime 0

User Configuration (Enabled)
Windows Settings
Remote Installation Services
Client Installation Wizard option
Policy Setting
Custom Setup Disabled
Restart Setup Disabled
Tools Disabled

Internet Explorer Maintenance
Connection/Connection Settings
This GPO contains connection settings.
URLs/Important URLs
Name URL
Home page URL http://intlo
Search bar URL Not configured
Online support page URL Not configured
 

URLs/Favorites and Links
Policy Setting
Place favorites and links at the top of the list in the order specified below Not configured
Delete existing Favorites and Links, if present Not configured
Delete existing channels, if present Not configured
Links
Name URL
GoToAssist Remote Support Tool http://www.gotoassist.com
 

Administrative Templates
Microsoft Office Outlook 2003/Tools | Options.../Other
Policy Setting
Empty Deleted Items Folder Enabled
Empty the Deleted Items folder upon exiting Enabled
 

Microsoft Outlook 2000/Tools | Options/Other
Policy Setting
Empty Deleted Items Folder Enabled
Empty the Deleted Items folder upon exiting Enabled
 

Microsoft Outlook 2002/Tools | Options.../Other
Policy Setting
Empty Deleted Items Folder Enabled
Empty the Deleted Items folder upon exiting Enabled "
 
It is very weird!

Please help
Thanks
Mark Galvin

Answer : CD not accessible

pappaslim here is your solution:

go to local security policy--> local policies--->security options--->Devices: Restrict CD-ROM access to locally logged-on user only

change it to disable