• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 942
  • Last Modified:

Group Policy that prohibiting the use of USB.

How to create a Group Policy that prohibiting the use of USB on my network?  Don't want some of my employees taking my data.
0
enoc1324
Asked:
enoc1324
  • 3
  • 2
  • 2
1 Solution
 
Netman66Commented:
0
 
abraham808Commented:
Use Group Policy to disable the USB via registry:

This can be a real pain on newer laptops or systems that don't even have a PS2 interface for the mouse or keyboard.

There is a simple registry change that will keep the USB storage drivers from starting when the system boots. Keeps people from walking up to a PC and copying data off with a USB key, but allows you to keep your scanner, keyboard, and mouse working.

As always - back your system up before messing around in the registry.

Just open regedit and browse to this key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsbStor

Notice the value 'Start'

Switch this value to 4, and USB storage devices are disabled.
Switch this value to 3, and USB storage devices are enabled.
0
 
enoc1324Author Commented:
This does not help me.  There are USB Keyboard and mouse on these systems.  I can't Disable all USB.  Just for Hard, USB pen drive, I POD and cell phone with hard divers on them.  
0
Veeam Disaster Recovery in Microsoft Azure

Veeam PN for Microsoft Azure is a FREE solution designed to simplify and automate the setup of a DR site in Microsoft Azure using lightweight software-defined networking. It reduces the complexity of VPN deployments and is designed for businesses of ALL sizes.

 
Netman66Commented:
Unless you're running Vista as the client, you can't get selective using Group Policy - unfortunately.  It's all USB or nothing.

You can try the USBStor entry in the registry.

0
 
abraham808Commented:
The solution I gave only disables USB storage.  All other USB devices, Mouse and Keyboard work fine.
0
 
enoc1324Author Commented:
Ok  Abraham808 How do I add this to a Group Policy.
0

Featured Post

Get your Disaster Recovery as a Service basics

Disaster Recovery as a Service is one go-to solution that revolutionizes DR planning. Implementing DRaaS could be an efficient process, easily accessible to non-DR experts. Learn about monitoring, testing, executing failovers and failbacks to ensure a "healthy" DR environment.

  • 3
  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now