• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1237
  • Last Modified:

How to block users from access usb portable storage devices (they can still plug in but cant access)

dear experts,

I'm an administrator and wants to achive the above to minimise virus infection to the pc (educating the users failed...). I have administrative rights account and want to limit access to usb storage devices (thumb drives/portable hdd) from normal users who logs in using limited access accounts.

How do I implement it and how do I reverse it? Also it should not affect my administrative account from using the usb thumb drive (only limited account users are affected). Please advice!

Thanks!

Bob


0
bobbytcy
Asked:
bobbytcy
  • 3
  • 3
  • 2
  • +2
1 Solution
 
RobSampsonCommented:
From here:
http://www.hemmy.net/2006/04/30/disable-usb-storage-devices/

This is a great tip to disable usb storage drivers while allowing your keyboards, mouse and scanner to keep working. Very useful for public computers where you need to keep people away from copying its content. This only works on windows machine though.

1. Always backup your registry in case you mess up something
2. Open regedit and change the key value Start
of HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USbStor to 4.

Value 4 - Storage USB devices are disabled
Value 3 - Storage USB devices are enabled



Also this can be done with Group Policy:
http://diaryproducts.net/about/operating_systems/windows/disable_usb_sticks


Regards,

Rob.
0
 
sonysgCommented:
hi bobbytcy,
there is a similiar question been asked before
http://www.experts-exchange.com/OS/Miscellaneous/Q_21732139.html

rgds
eugene
0
 
KCTSCommented:
You can create a group policy ad described in
http://support.microsoft.com/kb/555324 
0
VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

 
bobbytcyAuthor Commented:
hi guys thanks for the input but  i'm just managing 3 pcs so GPO is an overkill (on a Win XP). I'd go with the idea of changing the registry key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USbStor to 4.

but in this case if I were to login as administrator i'd be blocked from using usb storage as well unless i enable it to "3". What i'm looking for is on a same pc:

user A: limited account logs in- can't use usb storage at all (this can be easily achieved by registry method since he can't install new usb drivers so it's foolproof, right?)

user B: administrator account logs in- without changing registry string/running "net start usbstor" in command prompt, can straight away plug in a usb storage device/portable hdd and use. This is the hard part...

thanks!

Bob
0
 
RiCHQRDCommented:
could you create a small batch file to run the command when you log in which will enable it for you, and a smimlar batch file for the other users that will run when they log in and will disable the usb drive functions
0
 
bobbytcyAuthor Commented:
hi richard then roughly what'd the batch file look like for the administrator account? Is it something like this:

//netStart.bat

cls
@net start usbstor

pls advice.

Thanks!

Bob
0
 
sonysgCommented:
HI Bob,
there's a batch file for you to do a reference
http://www.petri.co.il/forums/showthread.php?t=3299

think that batch file that describe on the article will work for you.

rgds
eugene
0
 
sonysgCommented:
refer here aslo
http://www.petri.co.il/disable_usb_disks_with_gpo.htm
http://www.petri.co.il/disable_usb_disks.htm
there's a dl link for the enable and disable  USB .reg file aslo

rgds
eugene
0
 
bobbytcyAuthor Commented:
That's what i want! Thanks for all the helps guys!
0
 
RiCHQRDCommented:
glad that worked, the response given by sonysg was pretty much the path i was on. let us know weather it really works. the answers on the links provided gave mixed results.
regards
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

  • 3
  • 3
  • 2
  • +2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now