Article:  |
Disabling USB Storage With Group Policy | |
| Subject: | disable usb storage device | |
| Date: | 2006-10-19 13:30:26 | |
| From: | cmahadeo | |
|
I was able to import the *.adm file successfully. However, the policy isn't working. My environment is window xpsp2 and windows 2000 sp4.
|
||
Showing messages 1 through 3 of 3.
-
disable usb storage device
2006-10-23 18:34:52 csh@rp [Reply | View]
-
disable usb storage device
2006-10-23 18:32:31 csh@rp [Reply | View]
On thing that i forgot to mention is this needs to be applied to the computer object and not user object. The GPO needs to be linked to or above the OU the computer objects are in.
Chad -
disable usb storage device
2007-01-27 17:16:23 yahvone@yahoo.com [Reply | View]
HI CHAD. I HOPE YOU CAN HELP ME. THE ADMINISTRATOR WONT LET ME DISABLE ANY THING. IT WONT ALLOW ME TO DOWN LOAD, RUN , ASSET MY ON ACCOUNT. CAN YOU TELL ME THE EASY WAY TO BET THIS MONSTER?. ALL I NEED IS SOMETHING REALLY EASY. PLEASE HELP ME CHAD.I REALY DO NOT KNOW MUCH ABOUT COMPUTER. THATS WHY IT HAS TO BE EASY. CAN YOU HELP?
You can however create a gpo to set permisions on the usbstor.pnf + use the gpo to create the usbstor reg key, in the gpo you deny a group access to the key and the file.
Setting permissions on the usbstor.pnf will take care of any new devices.
The reg key will overwrite the existing key.
The dword start located in "hklm\system\currentcontrolset\services\usbstor\" will not exist so the user will not be able to use the device and will not have permissions to change the key either.
Chad