Pirasanna
asked on
Regedit changes effect without restart
Hi,
I have a new DELL PC,win XP SP2, i have edited in regedit
HKEY_LOCAL_MACHINE\SYSTEM\ CurrentCon trolSet\Se rvices\USB STOR\Start
for USB diable, and the changes take effect without reboot.
I want the change to take place only after a reboot. how can i make this? any help
Thanks
I have a new DELL PC,win XP SP2, i have edited in regedit
HKEY_LOCAL_MACHINE\SYSTEM\
for USB diable, and the changes take effect without reboot.
I want the change to take place only after a reboot. how can i make this? any help
Thanks
ASKER
But I have 10 other PCs but they are HP... this change takes effect only after reboot... without a reboot nothing happens at all...
But only for this DELL PC it takes place immediately... so i think there should be some where a setting can be done... i just don know where.
But only for this DELL PC it takes place immediately... so i think there should be some where a setting can be done... i just don know where.
There is no setting in Windows that will do that. This could because of the problem with windows.
To add some technical explanation to pspglb's good advice ....
If a Windows Service is Started, and you change the Start type to 4 being disabled, the service will not stop. You would have to run something to the effect of 'net stop usbstor' to actually stop the service.
Are you trying to block the use of Thumb Drives/Removable Storage?
If a Windows Service is Started, and you change the Start type to 4 being disabled, the service will not stop. You would have to run something to the effect of 'net stop usbstor' to actually stop the service.
Are you trying to block the use of Thumb Drives/Removable Storage?
ASKER
Yes im trying to block user from usiing thunb drive. but my problem is users are also administrators... so i need a script tht runs in the background to diasable usb.... any help guys...
Thanks Johnb6767.
Pirasanna: We have the same setup in our company, were we have disabled thumb drives using GPO for all the users including local admins. But the domain or local admins can change the regedit settings and the usbstor.inf file settings and can access thumbdrives. So as per my knowledge what you are asking is pretty difficult to achieve. If someone as something that will really do that, i am very much intreseted to see that.
Pirasanna: We have the same setup in our company, were we have disabled thumb drives using GPO for all the users including local admins. But the domain or local admins can change the regedit settings and the usbstor.inf file settings and can access thumbdrives. So as per my knowledge what you are asking is pretty difficult to achieve. If someone as something that will really do that, i am very much intreseted to see that.
ASKER
ya its quite difficult.. but wat i have done for the other PCs is:
i have a script to chk if usb is enabled, if its enabled the script disables the usb and restarts the pc. this happen each time a user logs in.
so if changes occur after a restart this script would work. but not for 1 PC sadly.
well if the user finds out the script running in background, he can disable it. it can be broken with users who have a detail knowledge ...
this was the only solution i culd think of
i have a script to chk if usb is enabled, if its enabled the script disables the usb and restarts the pc. this happen each time a user logs in.
so if changes occur after a restart this script would work. but not for 1 PC sadly.
well if the user finds out the script running in background, he can disable it. it can be broken with users who have a detail knowledge ...
this was the only solution i culd think of
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Oh, and as for the sneaky users changing settings/disabling GPOs, then firing a few might make clear that they are violating the Computer Usage policy (assuming you have one.....)
This is the normal behaviour of the Registry, which cannot be changed. If it is build to take effect without a restart it will take effect without a restart.
You can try one this, if you on a AD environment, run this through a GPO and put this under Shutdown script, so that whenever user shutdown's the computer or restarts it the changes will take effect.