asked on

Lock usb ports through group policy

What i need is a Custom Group policy template that uses the user configuration to determine which users have access to usb ports on their computers. Note it must be able to be used in the user configuration policy not the computer policy.

ASKER CERTIFIED SOLUTION

mattcarver

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

trippleO7

You have to create a custom ADM template in order to do this....nothing built in until Vista ADM's are out.

Here's the MS article on how to do this:

http://support.microsoft.com/default.aspx?scid=kb%3ben-us%3b555324

Michael Pfister

As far as I know this is not possible with Group Policy. You need a third-party-tool to do this.
The ones that crosse my mind are
http://www.scriptlogic.com/
http://www.securewave.com
http://www.protect-me.com/

Probably there are some more.

Hope it helps.

younghv

Check out this suggestion from 'leontas' at:
https://www.experts-exchange.com/questions/22037408/Disable-specific-USB-Ports.html

Vic

"I do this all the time to disable usb sticks & ipods to connect to my workstations at work, because people tend to put their own stuff on the companies computers which is not allowed by the management...

Run regedit,
go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR

You will see a DWORD value START that says 3 there, change 3 to 4, and thats it! You may need to restart your pc, I dont remember as its been a few months since i last used this method.

USB stuff work just fine, ie printers etc, but no usb storage for your users ! :)

This registry tweak is so simple that you dont really need to backup your registry, however i encourage you to do so because if for whatever reason someone MUST use usb storage and you are not there, there will be a problem! :)"