[Webinar] Streamline your web hosting managementRegister Today

  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 626
  • Last Modified:

disable USB in AD with MS template and GPO

Dear Peoples,

MS 2003 with XP clients

I have followed the online (many) instructions on how to disable the USB from the AD.
I have implemented the .adm with a Test Group, but...

this does not take effect, how do I publish or make active this policy to see the results on a client ?
I have tried the 'gpupdate' command on the client but this refreshes nothing - I am guessing the policy has not been made active from the AD, should I be closing windows or running a command ??? what is the default delay for the updates and where can I modify this.

many thanks - the BIG 500 points because this one is really annoying.
1 Solution
Ady FootSharePoint ConsultantCommented:
Hi there Ali,

I'm not too sure what steps you've taken so far and I wonder if you've actually created the group policy object against the Organizational Unit that contains your workstation accounts?  Please look at the following page and follow the steps - in conjunction with the instructions you've already read regarding the .adm etc - and see if it works.



Hello Ali,

Please check the link.


I answered the que.. before..
 this is the solution

you can disable USB from the registry.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\UsbStor
Value: "Start", change to "4" (Hexadecimal).
Add this to your GPO

You can add any registry key you want to the GPO and have it applied to any
OU from: Computer Configuration > Windows Settings > 
Security Settings > Registry. Right click and choose Add key. Add the key
 and refresh the policy.
Free tool for managing users' photos in Office 365

Easily upload multiple users’ photos to Office 365. Manage them with an intuitive GUI and use handy built-in cropping and resizing options. Link photos with users based on Azure AD attributes. Free tool!

AliQahtaniAuthor Commented:
Hi there

I tried Ady & Ashvin did not work. but for yousef how can i defined the DWORDR from GPO
you can push it from computer conf. in GPO

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Tackle projects and never again get stuck behind a technical roadblock.
Join Now