• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1271
  • Last Modified:

Windows 7 - Disable USB Drives

Looking for a free (or low-cost) solution for blocking user access to usb-drives in Windows 7 and XP environment.

From what I've read, with Group Policy, it the GPO only works on blocking access to those USB Drives whose drivers have already been loaded in the computer. So after the GPO's applied, if I plug in a new USB flash drive into the system, it will load the driver and USB Flash drive will be accessible.

Not sure if there's a good solution for this, and if there is, can you apply it to only specific users? Wouldn't want to prevent an admin from logging on a system under their account and running necessary repair tools from a USB Flash drive (assuming network drives are inaccessible).
0
garryshape
Asked:
garryshape
  • 2
3 Solutions
 
Thomas Zucker-ScharffSystems AnalystCommented:
USB-Set is free but will disable for the computer, not by user.
0
 
garryshapeAuthor Commented:
Thanks for the suggestion. It looks like that has to be installed on the systems though. What's your experience with it?
0
 
Thomas Zucker-ScharffSystems AnalystCommented:
Yes it does need to be installed.  I have installed it on our machines and it has worked very well.  I set it to silently innoculate all USB devices and network devices that are attached to the computer.  I also set the switches to disable autorun.  It simply writes a folder called autorun.inf with a file in the folder that has the hidden and read only bits set.  Just doing this has cut down infections from USB sticks to 0 on computers that are used in areas like conference rooms.

The setup takes very little time per computer, I usually do it when I've been asked to do something else on the computer that requires me to be physically there.
0
 
SaadAhmedFarooquiCommented:
You can disable USB storage device from group policy. You will need to extend the group policy by importing an administrative template, then the setting to disable usb storage devices will be aavailable just like other settings.

The settings ar available form microsoft from the following link:

http://support.microsoft.com/kb/555324
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Protect Your Employees from Wi-Fi Threats

As Wi-Fi growth and popularity continues to climb, not everyone understands the risks that come with connecting to public Wi-Fi or even offering Wi-Fi to employees, visitors and guests. Download the resource kit to make sure your safe wherever business takes you!

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now