USB jumpdrives

Posted on 2005-05-07
Last Modified: 2010-04-26

How can I allow the use of USB jumpdrives for reading/writing, but restrict executing???

These are for public internet machines running win2k with GP applied.

Question by:jmcnear
    LVL 95

    Expert Comment

    by:Lee W, MVP
    You can't.  At least I've never seen a way.  If the drives are NTFS MAYBE you can, but if you can't control the USB jump drives attached to it, I don't see any way this is possible.
    LVL 3

    Expert Comment

    You may be able to use the Application Security Registration tool (appsec.exe) to allow the users access to only a pre-defined set of applications. This will ensure that Users can only access certain applications as pre-defined by an Administrator.

    More information can be found here:

    LVL 13

    Expert Comment

    how are these users allowed to logon... or is the station logged on all the time for their use...

    can you throttle their abilities thru their logon name (hopefully they are not on as admins)????

    Author Comment

    they are logged in all the time, but not as admins, but rather a regular user.  I apply GPO at start up and logon time.

    Is there a gpo option regarding usb drives?

    LVL 7

    Accepted Solution

    here is a thread that is similar


    Featured Post

    Courses: Start Training Online With Pros, Today

    Brush up on the basics or master the advanced techniques required to earn essential industry certifications, with Courses. Enroll in a course and start learning today. Training topics range from Android App Dev to the Xen Virtualization Platform.

    Join & Write a Comment

    Windows 7 does not have the best desktop search built in. This is something Windows 7 users have struggled with. You type something in, and your search results don’t always match what you are looking for, or it doesn’t actually work at all. There ar…
    Skype is a P2P (Peer to Peer) instant messaging and VOIP (Voice over IP) service – as well as a whole lot more.
    It is a freely distributed piece of software for such tasks as photo retouching, image composition and image authoring. It works on many operating systems, in many languages.
    Internet Business Fax to Email Made Easy - With eFax Corporate (, you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…

    746 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now