asked on

USB, CD-ROM, Floppy Disk and LS-120 drivers Blocking from Group Policy not working

Hi All,
I was instructed by my client to disable USB flash drives, USB HDD, floppy drives, SD... to some users in company.

I have followed Microsoft and Petri instruction to the letter but unfortunately its not working!

http://support.microsoft.com/kb/555324

http://www.petri.co.il/disable_usb_disks_with_gpo.htm

I have rebooted the computers, applied the policy to one user or a group didnt make different.

I dont want to install Endpoint protection or any third party software I would like to get it done using Microsoft software only please :)

Check attachments

OS: Windows Server 2003 R2 64bit SP2 with 4GB RAM

Sean
Group-Policy-List.JPG
USB-Disable-USB.JPG
Group-Policy-Link-with-AD.JPG

ASKER CERTIFIED SOLUTION

Toni Uranjek

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

prodriveit

ASKER

Thank you Toni for putting me in right direction

But is there any way I could apply the policy to the user instead of the computer because users move around all the time?

It just makes life bit easer

Sean

Toni Uranjek

No, unfortunately "Computer Configuration" settings can be applied only to computer accounts. There is loopback mode which will process computer configuration after user logs on, but this will not help in your case because your users switch computers.

prodriveit

ASKER

I guess I need to install Endpoint MR3 to work around this issue which will take around 5-7 hrs to install and configure fully with all the clients.

Thank you Toni

Sean

SOLUTION

tomtown

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial