We help IT Professionals succeed at work.

We've partnered with Certified Experts, Carl Webster and Richard Faulkner, to bring you two Citrix podcasts. Learn about 2020 trends and get answers to your biggest Citrix questions!Listen Now

x

Lock usb ports through group policy

NolanDorsett
NolanDorsett asked
on
Medium Priority
2,402 Views
Last Modified: 2010-02-28
What i need is a Custom Group policy template that uses the user configuration to determine which users have access to usb ports on their computers.  Note it must be able to be used in the user configuration policy not the computer policy.
Comment
Watch Question

Not sure exactly what your asking for.  Here is a ADM template to disable USB devices:
http://www.petri.co.il/software/usb_removable_drives_adm.zip

Here's a good link on disabling USB:
http://www.petri.co.il/disable_usb_disks_with_gpo.htm

Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts
You have to create a custom ADM template in order to do this....nothing built in until Vista ADM's are out.

Here's the MS article on how to do this:

http://support.microsoft.com/default.aspx?scid=kb%3ben-us%3b555324

CERTIFIED EXPERT

Commented:
As far as I know this is not possible with Group Policy. You need a third-party-tool to do this.
The ones that crosse my mind are
http://www.scriptlogic.com/
http://www.securewave.com 
http://www.protect-me.com/

Probably there are some more.

Hope it helps.
CERTIFIED EXPERT
Author of the Year 2011
Top Expert 2006

Commented:
Check out this suggestion from 'leontas' at:
http://www.experts-exchange.com/Operating_Systems/Q_22037408.html

Vic

"I do this all the time to disable usb sticks & ipods to connect to my workstations at work, because people tend to put their own stuff on the companies computers which is not allowed by the management...

Run regedit,
go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR

You will see a DWORD value START that says 3 there, change 3 to 4, and thats it! You may need to restart your pc, I dont remember as its been a few months since i last used this method.

USB stuff work just fine, ie printers etc, but no usb storage for your users ! :)

This registry tweak is so simple that you dont really need to backup your registry, however i encourage you to do so because if for whatever reason someone MUST use usb storage and you are not there, there will be a problem! :)"
Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.