Article:
  Disabling USB Storage With Group Policy
Subject:   disable usb storage device
Date:   2006-10-23 18:34:52
From:   csh@rp
Response to: disable usb storage device

As already mentioned this will only work on new USB devices.
You can however create a gpo to set permisions on the usbstor.pnf + use the gpo to create the usbstor reg key, in the gpo you deny a group access to the key and the file.


Setting permissions on the usbstor.pnf will take care of any new devices.


The reg key will overwrite the existing key.
The dword start located in "hklm\system\currentcontrolset\services\usbstor\" will not exist so the user will not be able to use the device and will not have permissions to change the key either.


Chad

Full Threads Oldest First

Showing messages 1 through 2 of 2.

  • disable usb storage device
    2006-10-23 18:32:31  csh@rp [View]

    On thing that i forgot to mention is this needs to be applied to the computer object and not user object. The GPO needs to be linked to or above the OU the computer objects are in.

    Chad
    • disable usb storage device
      2007-01-27 17:16:23  yahvone@yahoo.com [View]

      HI CHAD. I HOPE YOU CAN HELP ME. THE ADMINISTRATOR WONT LET ME DISABLE ANY THING. IT WONT ALLOW ME TO DOWN LOAD, RUN , ASSET MY ON ACCOUNT. CAN YOU TELL ME THE EASY WAY TO BET THIS MONSTER?. ALL I NEED IS SOMETHING REALLY EASY. PLEASE HELP ME CHAD.I REALY DO NOT KNOW MUCH ABOUT COMPUTER. THATS WHY IT HAS TO BE EASY. CAN YOU HELP?