I really appreciate anyone could help me

Hi all,

I need to prevent some network users from accessing any removable devices from thier workstations e.g ( Floppy disk, CD-drives, USB ports...etc) and allow others to use some or all of such devices. Is there any polices in the DC I can activate to do so?? or any utilities that could help to sort out this issue. How ever, I prefer to this as one-shot over network.

I really appreciate your help.
bandarmanAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

RobArdillCommented:
There is a Group policy that can block removeable storage devices. Never used it myself, but have been to sites that do. I'll track it down.
RobArdillCommented:
No sorry I was wrong. Was a GPO, but a GPO with a couple of reg keys.
 
http://support.microsoft.com/default.aspx?scid=kb;en-us;823732
RobArdillCommented:
Well I keep chaging my mind. :) I just found this after looking abit further.

http://support.microsoft.com/default.aspx?scid=kb;en-us;555324

Another way... not completely fool proof, but you can policy out the visability of certain drive letters.

The other way is to by a third party tool, most of these have the necessary functions to block all removable storage, not just USB. There's heaps out there. Never used any of them, but that's the
JavaScript Best Practices

Save hours in development time and avoid common mistakes by learning the best practices to use for JavaScript.

SunBowCommented:
recently answered question
bandarmanAuthor Commented:
Hi RobArdill,

Thanx for your last reply. I went to microsoft link you provided me and created the .adm file but don't know exactly where to drop this file and what to do next ???
could you please explain this with more deatils.

Thanx again for your help
James ClintonSenior System Support EngineerCommented:
In Group Policy management
Select the group policy you want to apply this to e.g. default domain policy
edit
click on either adminisrative templates and select
filtering - untick only show policy settings that can be fully managed
then
action add/remove templates
then add and browse to the .adm file

when added this will appear amongst all the other settings

have you also read this..?
http://www.experts-exchange.com/Operating_Systems/Q_21732139.html

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
RobArdillCommented:
Beat me to it.. But yeah that's the way to do it.

Rob
RobArdillCommented:
Didn't I answer the question?

You asked for the exact policy I supplied, not how to use GPMC and I got no credit.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Networking

From novice to tech pro — start learning today.