Using Active Directory / Group Policy to restrict access to local hardware.

Posted on 2006-05-24
Last Modified: 2013-12-23
I am setting up an active directory "domain" for  a small health care provider.

The client has ask that I restrict use of the floppy / CD / and thumb drives.
I could simply unplug the floppys and CD drive but I want the people to be able to listen to music CD's.
Is there anyway to use AD and or group policy objects to make sure that users cannot transport files into / out of this organization?

Question by:wTinnel
    LVL 10

    Accepted Solution

    Unfortunately, Active Directory Group Policy cannot directly disable the use of thumb drives. You can disable floppy drives, hard drives and certain drive letters (mainly default ones such as A:, C:, D: etc) through Active Directory easily enough with Active Directory though.

    have a look at the link below for some instructions to remove thumb drive access using the registry:


    Author Comment

    Thank you,

    I will look at this soon.  (It will be early June)
    And maybe I will just disallow all drive letters other then c: and my network mappings.


    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Threat Intelligence Starter Resources

    Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

    Enterprise networks where VoIP phones have been deployed frequently use port configurations that allow both a computer and an IP phone to be plugged into the same switch port but use different VLANs. On Cisco equipment I'm referring to the "native V…
    This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
    Here's a very brief overview of the methods PRTG Network Monitor ( offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…
    In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor ( If you're interested in additional methods for monitoring bandwidt…

    794 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now