Solved

Lock usb ports through group policy

Posted on 2006-10-31
4
2,244 Views
Last Modified: 2010-02-28
What i need is a Custom Group policy template that uses the user configuration to determine which users have access to usb ports on their computers.  Note it must be able to be used in the user configuration policy not the computer policy.
0
Comment
Question by:NolanDorsett
4 Comments
 
LVL 4

Accepted Solution

by:
mattcarver earned 500 total points
ID: 17842540
Not sure exactly what your asking for.  Here is a ADM template to disable USB devices:
http://www.petri.co.il/software/usb_removable_drives_adm.zip

Here's a good link on disabling USB:
http://www.petri.co.il/disable_usb_disks_with_gpo.htm
0
 
LVL 6

Expert Comment

by:trippleO7
ID: 17842545
You have to create a custom ADM template in order to do this....nothing built in until Vista ADM's are out.

Here's the MS article on how to do this:

http://support.microsoft.com/default.aspx?scid=kb%3ben-us%3b555324

0
 
LVL 28

Expert Comment

by:Michael Pfister
ID: 17842565
As far as I know this is not possible with Group Policy. You need a third-party-tool to do this.
The ones that crosse my mind are
http://www.scriptlogic.com/
http://www.securewave.com
http://www.protect-me.com/

Probably there are some more.

Hope it helps.
0
 
LVL 38

Expert Comment

by:younghv
ID: 17842712
Check out this suggestion from 'leontas' at:
http://www.experts-exchange.com/Operating_Systems/Q_22037408.html

Vic

"I do this all the time to disable usb sticks & ipods to connect to my workstations at work, because people tend to put their own stuff on the companies computers which is not allowed by the management...

Run regedit,
go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR

You will see a DWORD value START that says 3 there, change 3 to 4, and thats it! You may need to restart your pc, I dont remember as its been a few months since i last used this method.

USB stuff work just fine, ie printers etc, but no usb storage for your users ! :)

This registry tweak is so simple that you dont really need to backup your registry, however i encourage you to do so because if for whatever reason someone MUST use usb storage and you are not there, there will be a problem! :)"
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

Suggested Solutions

Hello I read in a discussion about a person who configured a very simple mirror RAID with two hard drives; the system and data were on the same partition. He asked how to repair the system as it was not booting up anymore. In his case running …
In a recent article here at Experts Exchange (http://www.experts-exchange.com/articles/18880/PaperPort-14-in-Windows-10-A-First-Look.html), I discussed my nine-month sandbox testing of the Windows 10 Technical Preview, specifically with respect to r…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
You have products, that come in variants and want to set different prices for them? Watch this micro tutorial that describes how to configure prices for Magento super attributes. Assigning simple products to configurable: We assigned simple products…

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now