Question regarding Group Policy (Win2008) (Win 7 workstations)
I have a basic "users" group that locks down users, in this case no removable media access (disabled read and write). However i have some users that need this function, so i created a group "Power users" and assign the GPO allowing (or disabling) blocking removable storage devices to that group and the same "users" folder.
Which policy will the GPO process for the power users? Will the Allow take priority over the disable because it is scoped to a security group? How do i tell AD which one should take preference?