I'm surprised not to be able to find this question; it must have an answer so simple it doesn't need asked, but here goes; So I want to deny all access to removable storage for standard users at our office on one computer. I've been able to deny that access in the user configuration branch of GPedit. However; it restricts all users, even admin, when I enable that setting. So how to I get it to differentiate between users? Of course I want admin to have access and standard users not to have access. Thank you in advance.