The problem is trying to enable access after it has been blocked. I setup an additional policy and put in the opposite from the above, the problem is that the drives do not re appear, in particular CD drives.
If I look through device manager it is there but with the yellow triangle. If I remove,restart it appears to be fine. But the disks cannot be read.
I have no errors through group policy when I check rsop.