• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 946
  • Last Modified:

Group Policy that prohibiting the use of USB.

How to create a Group Policy that prohibiting the use of USB on my network?  Don't want some of my employees taking my data.
0
enoc1324
Asked:
enoc1324
  • 3
  • 2
  • 2
1 Solution
 
Netman66Commented:
0
 
abraham808Commented:
Use Group Policy to disable the USB via registry:

This can be a real pain on newer laptops or systems that don't even have a PS2 interface for the mouse or keyboard.

There is a simple registry change that will keep the USB storage drivers from starting when the system boots. Keeps people from walking up to a PC and copying data off with a USB key, but allows you to keep your scanner, keyboard, and mouse working.

As always - back your system up before messing around in the registry.

Just open regedit and browse to this key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsbStor

Notice the value 'Start'

Switch this value to 4, and USB storage devices are disabled.
Switch this value to 3, and USB storage devices are enabled.
0
 
enoc1324Author Commented:
This does not help me.  There are USB Keyboard and mouse on these systems.  I can't Disable all USB.  Just for Hard, USB pen drive, I POD and cell phone with hard divers on them.  
0
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

 
Netman66Commented:
Unless you're running Vista as the client, you can't get selective using Group Policy - unfortunately.  It's all USB or nothing.

You can try the USBStor entry in the registry.

0
 
abraham808Commented:
The solution I gave only disables USB storage.  All other USB devices, Mouse and Keyboard work fine.
0
 
enoc1324Author Commented:
Ok  Abraham808 How do I add this to a Group Policy.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

  • 3
  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now