Disable Adding USB Drive and Memory Sticks via Group Policy and Group Policy Preferences

re: Disable Adding USB Drive and Memory Sticks via Group Policy and Group Policy Preferences

User in group disable on Targeting Editor — Thu, 17 Feb 2011 11:26:31 GMT

I'm stuck at adding "User in Group" after select the targeting editor screen click New Item then Select Security Group.

mschnlnine.vo.llnwd.net/.../Screen_Shot_A_Group_Policy_Management_Editor_Disable_Adding_USB_Drive_and_Memory_Sticks_via_Group_Policy%20Preferences%20%5BTargeting%20Security%20Group%5D.jpg

We have user in groups but is not able to select.

Much appreciated can email me a feedback at tchuan@gmail.com

re: Disable Adding USB Drive and Memory Sticks via Group Policy and Group Policy Preferences

Anurag Pathak — Tue, 15 Jun 2010 06:00:03 GMT

Hi,

Very good information.

but i have one query, through this exersice you can block only pendrive right ???

but when i plug USB hard disk is working fine, it is opeing properly.

i also update the policy as well as, i also restart the system but still i got the same result.

so kinldy tell me is there any other strp to block CD rom, USB HARD DISK, Pen Drive & etc.

Thanks & Regards,

Anurag

anurag.pathak88@gmail.com

kindly give me the replay on my above mail address.

re: Disable Adding USB Drive and Memory Sticks via Group Policy and Group Policy Preferences

Riccardo — Thu, 10 Jun 2010 12:58:19 GMT

In my environment I had to deny access to usbstore.inf and usbstore.pnf files to the system account as well, otherwise new drives would be installed and accessible the first time

re: Disable Adding USB Drive and Memory Sticks via Group Policy and Group Policy Preferences

max — Thu, 10 Dec 2009 20:30:37 GMT

hi!

will this block printers and usb mouses=?

thanks,.

bye

re: Disable Adding USB Drive and Memory Sticks via Group Policy and Group Policy Preferences

agedmcse — Fri, 27 Feb 2009 15:32:23 GMT

Went through your comprehensive document but unfortunately was unable to toggle between enable /disable as net start usbstor errored for allow user. My workaround was to create 2 Registry Items within User Configuration\Preferences\Windows Settings\Registry The first with a value of 4 targetting the Deny group I created. The second with a value of 3 targetting the Allow group I created. Each of these groups populated the Computer Configuration\Windows Settings\Security Settings\File System\Object name with explicit deny for the Deny Group and explicit allow for the Allow Group.

I shall be expanded the area of control to a small test group to see if their are any further issues. Thanks for the initial advice.

re: Disable Adding USB Drive and Memory Sticks via Group Policy and Group Policy Preferences

Deepak Talreja — Tue, 10 Feb 2009 17:13:20 GMT

Very good & informative. I hv some query if u can solve.

We had implemented the GPO in which "Regedit" couldnot run setting was done for each of the PC in the Win2k8 domain. Now I want to know how to get it enabled. Please advise or email me the links on

deepakbt@ravin-it.com

Dan Stolts Blog : Installing and Managing Group Policy Preferences on a Windows Server 2003 Domain

Wed, 21 Jan 2009 17:27:09 GMT

PingBack from http://blogs.technet.com/danstolts/archive/2009/01/21/installing-and-managing-group-policy-preferences-on-a-windows-server-2003-domain.aspx