I'm currently testing ERAC 220.127.116.11 with NOD32 v.4.2.71 clients. I am using static groups and have my computer in its own child group for testing. I enabled Block Removable Media, and waited for the computer to check-in with the server, once it did I got access denied plugging a USB key into my computer. Great! But! I then went and removed the computer from the group and policy where I'd made that setting. Nothing changed. I went and removed the checkbox from the specific policy, nothing changed. I've rebooted the computer, forced updates, nothing. If in the console I double click the computer, go to the configuration tab and view the policy directly from the computer, I see that Block Removable Media is still set to Yes. So, First question, why? Second question, how do I fix that? Third question, is there some form of gpupdate /force like option to be used either from the server or client to force the client to delete the old local cached policy and reload it from the server?