Solved

USB, CD-ROM, Floppy Disk and LS-120 drivers Blocking from Group Policy not working

Posted on 2008-10-30
5
960 Views
Last Modified: 2013-12-04
Hi All,
I was instructed by my client to disable USB flash drives, USB HDD, floppy drives, SD... to some users in company.

I have followed Microsoft and Petri instruction to the letter but unfortunately its not working!

http://support.microsoft.com/kb/555324

http://www.petri.co.il/disable_usb_disks_with_gpo.htm

I have rebooted the computers, applied the policy to one user or a group didnt make different.

I dont want to install Endpoint protection or any third party software I would like to get it done using Microsoft software only please :)

Check attachments

OS: Windows Server 2003 R2 64bit SP2 with 4GB RAM

Sean
Group-Policy-List.JPG
USB-Disable-USB.JPG
Group-Policy-Link-with-AD.JPG
0
Comment
Question by:prodriveit
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
5 Comments
 
LVL 31

Accepted Solution

by:
Toni Uranjek earned 250 total points
ID: 22839142
Hi!

You can't link GPO to users or groups, link your GPO to OU which contains computer accounts, because you are trying to configure Computer Configuration part of GPO.

HTH

Toni
0
 
LVL 2

Author Comment

by:prodriveit
ID: 22839574
Thank you Toni for putting me in right direction

But is there any way I could apply the policy to the user instead of the computer because users move around all the time?

It just makes life bit easer

Sean
0
 
LVL 31

Expert Comment

by:Toni Uranjek
ID: 22839633
No, unfortunately "Computer Configuration" settings can be applied only to computer accounts. There is loopback mode which will process computer configuration after user logs on, but this will not help in your case because your users switch computers.

0
 
LVL 2

Author Comment

by:prodriveit
ID: 22839719
I guess I need to install Endpoint MR3 to work around this issue which will take around 5-7 hrs to install and configure fully with all the clients.

Thank you Toni

Sean

0
 
LVL 1

Assisted Solution

by:tomtown
tomtown earned 250 total points
ID: 22840172
Can you try it using the registry directly?
Set the folowing value to 4
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR\Start=dword:00000004
do a
net stop usbstor
net start usbstor
0

Featured Post

NEW Veeam Agent for Microsoft Windows

Backup and recover physical and cloud-based servers and workstations, as well as endpoint devices that belong to remote users. Avoid downtime and data loss quickly and easily for Windows-based physical or public cloud-based workloads!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In a recent article here at Experts Exchange (http://www.experts-exchange.com/articles/18880/PaperPort-14-in-Windows-10-A-First-Look.html), I discussed my nine-month sandbox testing of the Windows 10 Technical Preview, specifically with respect to r…
Security measures require Windows be logged in using Standard User login (not Administrator).  Yet, sometimes an application has to be run “As Administrator” from a Standard User login.  This paper describes how to create a shortcut icon to launch a…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…

751 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question