Women in Technology

Hear us Roar



Article:
  Disabling USB Storage With Group Policy
Subject:   disable usb storage device
Date:   2006-10-19 13:30:26
From:   cmahadeo
I was able to import the *.adm file successfully. However, the policy isn't working. My environment is window xpsp2 and windows 2000 sp4.


Can you provide me with a solution since I need to disable the above in my organization

Full Threads Oldest First

Showing messages 1 through 3 of 3.

  • disable usb storage device
    2006-10-23 18:34:52  csh@rp [View]

    As already mentioned this will only work on new USB devices.
    You can however create a gpo to set permisions on the usbstor.pnf + use the gpo to create the usbstor reg key, in the gpo you deny a group access to the key and the file.

    Setting permissions on the usbstor.pnf will take care of any new devices.

    The reg key will overwrite the existing key.
    The dword start located in "hklm\system\currentcontrolset\services\usbstor\" will not exist so the user will not be able to use the device and will not have permissions to change the key either.

    Chad
    • disable usb storage device
      2006-10-23 18:32:31  csh@rp [View]

      On thing that i forgot to mention is this needs to be applied to the computer object and not user object. The GPO needs to be linked to or above the OU the computer objects are in.

      Chad
      • disable usb storage device
        2007-01-27 17:16:23  yahvone@yahoo.com [View]

        HI CHAD. I HOPE YOU CAN HELP ME. THE ADMINISTRATOR WONT LET ME DISABLE ANY THING. IT WONT ALLOW ME TO DOWN LOAD, RUN , ASSET MY ON ACCOUNT. CAN YOU TELL ME THE EASY WAY TO BET THIS MONSTER?. ALL I NEED IS SOMETHING REALLY EASY. PLEASE HELP ME CHAD.I REALY DO NOT KNOW MUCH ABOUT COMPUTER. THATS WHY IT HAS TO BE EASY. CAN YOU HELP?