Solved

Disable USB and CD via GP

Posted on 2008-10-11
2
623 Views
Last Modified: 2008-10-12
I have applied group policy for disabling USB and CD drive. For this I have created a custom template as per the KB http://support.microsoft.com/kb/555324. All is working fine except the USB. CD drive is disabled but USB is not disabled. System can still recognizing the USB pen drive.  I have applied this on computer configuration.

Can any one help to understand what's wrong with this.
Great thanks

Regards
Gaurav Arora
0
Comment
Question by:Shiv3
  • 2
2 Comments
 
LVL 1

Expert Comment

by:KKVP
ID: 22696652
Hi,

    Refer the following articles,
    http://support.microsoft.com/kb/555324

    Excerpts of the above article,

    "By default, Group Policy does not offer a facility to easily disable drives containing removable media, such as USB ports, CD-ROM drives, Floppy Disk drives and high capacity LS-120 floppy drives. However, Group Policy can be extended to use customised settings by applying an ADM template. The ADM template in this article allows an Administrator to disable the respective drivers of these devices, ensuring that they cannot be used."

     http://www.windowsdevcenter.com/pub/a/windows/2005/11/15/disabling-usb-storage-with-group-policy.html

Regards,
KKVP
0
 
LVL 1

Accepted Solution

by:
KKVP earned 250 total points
ID: 22696684
Hi,

   Create the Custom ADM file and import in your GP using GPMC, refer the below articles for more info,

  Copy the ADM template from the below KB,
  http://support.microsoft.com/default.aspx?scid=kb;en-us;555324

  To import the ADM file and enabling & disabling the USB, CD Drivers refer the below article,
http://thelazyadmin.com/blogs/thelazyadmin/archive/2005/07/05/Creating-Custom-ADM-Templates.aspx

Regards,
KKVP
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Synchronize a new Active Directory domain with an existing Office 365 tenant
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question