Women in Technology

Hear us Roar



Article:
  Disabling USB Storage With Group Policy
Subject:   Reg disable USB, CD-ROM, Floppy Disk (restrict drives, but i'm not able see in right side setting contents)
Date:   2006-12-22 20:31:30
From:   Murugavel
Have a nice day,


I copyied following text matter in notepad & save as .adm in windows folder/inf -folder. After that Administrative Templates under computer Configuration, and then click Add/Remove Templates in group policy add usb.adm then give ok, i'm able see custom policy * restrict drives, but i'm not able see in right side setting contents. Please help to resolve this problem. I'm waiting for yours valuable reply.



Please see copied content


CLASS MACHINE
CATEGORY !!category
CATEGORY !!categoryname
POLICY !!policynameusb
KEYNAME "SYSTEM\CurrentControlSet\Services\USBSTOR"
EXPLAIN !!explaintextusb
PART !!labeltextusb DROPDOWNLIST REQUIRED

VALUENAME "Start"
ITEMLIST
NAME !!Disabled VALUE NUMERIC 3 DEFAULT
NAME !!Enabled VALUE NUMERIC 4
END ITEMLIST
END PART
END POLICY
POLICY !!policynamecd
KEYNAME "SYSTEM\CurrentControlSet\Services\Cdrom"
EXPLAIN !!explaintextcd
PART !!labeltextcd DROPDOWNLIST REQUIRED

VALUENAME "Start"
ITEMLIST
NAME !!Disabled VALUE NUMERIC 1 DEFAULT
NAME !!Enabled VALUE NUMERIC 4
END ITEMLIST
END PART
END POLICY
POLICY !!policynameflpy
KEYNAME "SYSTEM\CurrentControlSet\Services\Flpydisk"
EXPLAIN !!explaintextflpy
PART !!labeltextflpy DROPDOWNLIST REQUIRED

VALUENAME "Start"
ITEMLIST
NAME !!Disabled VALUE NUMERIC 3 DEFAULT
NAME !!Enabled VALUE NUMERIC 4
END ITEMLIST
END PART
END POLICY
POLICY !!policynamels120
KEYNAME "SYSTEM\CurrentControlSet\Services\Sfloppy"
EXPLAIN !!explaintextls120
PART !!labeltextls120 DROPDOWNLIST REQUIRED

VALUENAME "Start"
ITEMLIST
NAME !!Disabled VALUE NUMERIC 3 DEFAULT
NAME !!Enabled VALUE NUMERIC 4
END ITEMLIST
END PART
END POLICY
END CATEGORY
END CATEGORY

[strings]
category="Custom Policy Settings"
categoryname="Restrict Drives"
policynameusb="Disable USB"
policynamecd="Disable CD-ROM"
policynameflpy="Disable Floppy"
policynamels120="Disable High Capacity Floppy"
explaintextusb="Disables the computers USB ports by disabling the usbstor.sys driver"
explaintextcd="Disables the computers CD-ROM Drive by disabling the cdrom.sys driver"
explaintextflpy="Disables the computers Floppy Drive by disabling the flpydisk.sys driver"
explaintextls120="Disables the computers High Capacity Floppy Drive by disabling the sfloppy.sys driver"
labeltextusb="Disable USB Ports"
labeltextcd="Disable CD-ROM Drive"
labeltextflpy="Disable Floppy Drive"
labeltextls120="Disable High Capacity Floppy Drive"
Enabled="Enabled"
Disabled="Disabled"

Full Threads Oldest First

Showing messages 1 through 10 of 10.

  • Reg disable USB, CD-ROM, Floppy Disk (restrict drives, but i'm not able see in right side setting contents)
    2009-01-31 23:19:46  sharnu [View]

    Hi,
    Right click on restrict drives and click on view go to Filtering uncheck only show policy setting that can be fully managed.
    Than you can able to see the settings
    • Reg disable USB, CD-ROM, Floppy Disk (restrict drives, but i'm not able see in right side setting contents)
      2010-07-22 04:43:18  aakperumal [View]

      I GET THE SETTING AND DISABLE THE USB.BUT DIN'T DISABLE THE USB DEVICE.PLEASE HELP ME.
  • Reg disable USB, CD-ROM, Floppy Disk (restrict drives, but i'm not able see in right side setting contents)
    2008-10-14 22:21:58  S.Jaleel [View]

    copyied following text matter in notepad & save as .adm in windows folder/inf -folder. After that Administrative Templates under computer Configuration, and then click Add/Remove Templates in group policy add usb.adm then give ok, i'm able see custom policy * restrict drives, but i'm not able see in right side setting contents. don't use this templates, please go this link you get all free software for disable all removable drive. http://www.intelliadmin.com/Downloads.htm
  • Reg disable USB, CD-ROM, Floppy Disk (restrict drives, but i'm not able see in right side setting contents)
    2007-05-23 03:49:36  dhaval1981 [View]

    Have a nice day,

    I copyied following text matter in notepad & save as .adm in windows folder/inf -folder. After that Administrative Templates under computer Configuration, and then click Add/Remove Templates in group policy add usb.adm then give ok, i'm able see custom policy * restrict drives, but i'm not able see in right side setting contents. Please help to resolve this problem. I'm waiting for yours valuable reply.

    • Reg disable USB, CD-ROM, Floppy Disk (restrict drives, but i'm not able see in right side setting contents)
      2007-10-16 03:40:26  ravianet [View]

      plz give the full adm file with all modificatins
      • Reg disable USB, CD-ROM, Floppy Disk (restrict drives, but i'm not able see in right side setting contents)
        2008-07-07 02:12:52  mesachin [View]

        i am facing the same problem .Is there anyone to look after this problem

        Sachin
  • Reg disable USB, CD-ROM, Floppy Disk (restrict drives, but i'm not able see in right side setting contents)
    2007-03-05 02:53:08  leonatavares [View]

    yes i am also facing the same problem!!!! Can anyone help me to solve this problem!!!


    Waintng for a reply
    thanks
    • Reg disable USB, CD-ROM, Floppy Disk (restrict drives, but i'm not able see in right side setting contents)
      2007-03-09 07:25:58  FS-CTI [View]

      In the GPO Editor you are using, select View>Filtering and uncheck the "Only show policy settings that can be fully managed" checkbox. You will no be able to see the new settings in the right hand pane.
      • Reg disable USB, CD-ROM, Floppy Disk (restrict drives, but i'm not able see in right side setting contents)
        2007-10-11 02:20:25  alstom.vasu [View]

        i have same problem

        anybody help me
        • Reg disable USB, CD-ROM, Floppy Disk (restrict drives, but i'm not able see in right side setting contents)
          2007-11-28 08:26:27  wuzjackal [View]

          If your adm file imported without errors and you're in your RESTRICT DRIVES folder of the GPO Editor and you are getting the message "There are no items to show in this view" then you need to turn off all filtering from the VIEW drop-down menu. Then just go back into the RESTRICT DRIVES folder and your settings will be there. You will still need to go into each one and enable it.

          This is how far I've gotten, I've tested it and it works but I can still transfer files to/from floppy, copy from cd-rom, open off of media even though each of the numerics have been changed to 4 in the registry (which is the default value for disable from what I can tell). Any ideas?