We help IT Professionals succeed at work.

Check out our new AWS podcast with Certified Expert, Phil Phillips! Listen to "How to Execute a Seamless AWS Migration" on EE or on your favorite podcast platform. Listen Now

x

what is the best way to disable USB on the network using GPO

IT_Group1
IT_Group1 asked
on
Medium Priority
542 Views
Last Modified: 2012-05-11
Hello Experts.

I want to disable the using of flash drives and disk on keys on my network.
I know that the best way to do this is using GPO.
So i want to know the proper configuration to the GPO.
My DC is server 2008 and the client PC's is windows 7.

Thanks.
Comment
Watch Question

Commented:
you know that certain internal hardware is linked to USB ? for example bluetooth
do you want to disable USB Mice ?

Author

Commented:
Hi enachemc

no i just want to disable mass storage devices and portable flash drives

Commented:
The best way to do this would be to remove the ability to install new hardware from all unprivileged accounts. This give you the ability to stop users from connecting not just USB storage devices, but any new HW as it won't allow installation.

Author

Commented:
Hi Chev_PCN

can you give me a brief on how to do this ?

Commented:
In your GMP console:
Computer Configuration >> Windows Settings >> Security Settings >> Local Policies >> User Rights Assignment.
Limit the "Load and unload device drivers" to administrator groups only.
Unlock this solution and get a sample of our free trial.
(No credit card required)
UNLOCK SOLUTION

Author

Commented:
Thx
Unlock the solution to this question.
Thanks for using Experts Exchange.

Please provide your email to receive a sample view!

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.