advertisement

Article:
  Disabling USB Storage With Group Policy
Subject:   disable usb storage device
Date:   2006-10-23 18:34:52
From:   csh@rp
Response to: disable usb storage device

As already mentioned this will only work on new USB devices.
You can however create a gpo to set permisions on the usbstor.pnf + use the gpo to create the usbstor reg key, in the gpo you deny a group access to the key and the file.


Setting permissions on the usbstor.pnf will take care of any new devices.


The reg key will overwrite the existing key.
The dword start located in "hklm\system\currentcontrolset\services\usbstor\" will not exist so the user will not be able to use the device and will not have permissions to change the key either.


Chad
Main Topics Oldest First

Showing messages 1 through 1 of 1.

  • disable usb storage device
    2006-10-23 18:32:31  csh@rp [Reply | View]

    On thing that i forgot to mention is this needs to be applied to the computer object and not user object. The GPO needs to be linked to or above the OU the computer objects are in.

    Chad