bobmaj
asked on
Group policy to restrict usb port access to domain users but to excluded admins
Hello Expert,
I have a group policy configure to restrict Usb port access ( see attachment ).
Because this is computer policy I found that by unchecking do not apply policy to admins
has no effect
The policy work fine but the downside is admins are affected also.
Is there any other group policy I can use to achive the above
but exclude admins.
The final picture should be, any admin should be able to access his/her flash drive on any workstation but an ordinary domain user should be denied.
Thanks
No-Removable-Storage.htm
I have a group policy configure to restrict Usb port access ( see attachment ).
Because this is computer policy I found that by unchecking do not apply policy to admins
has no effect
The policy work fine but the downside is admins are affected also.
Is there any other group policy I can use to achive the above
but exclude admins.
The final picture should be, any admin should be able to access his/her flash drive on any workstation but an ordinary domain user should be denied.
Thanks
No-Removable-Storage.htm
ASKER
Hello Dariusq,
The two document describe how to do the restriction, but these restriction must only be applicable
to user the admins or admin group must be able to have access.
Regards
The two document describe how to do the restriction, but these restriction must only be applicable
to user the admins or admin group must be able to have access.
Regards
Read through the bottom of this posts for ideas.
http://diaryproducts.net/about/operating_systems/windows/disable_usb_sticks
http://diaryproducts.net/about/operating_systems/windows/disable_usb_sticks
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Well spotted ARK-DS, I did not think about that one! this wont work without a GPO Loopback
http://support.microsoft.com/default.aspx?scid=kb;en-us;823732
http://www.petri.co.il/disable_usb_disks_with_gpo.htm