Solved

Prevent use of USB flash drives with WIndows 7

Posted on 2012-04-12
9
687 Views
Last Modified: 2012-04-15
I have a standalone Windows 7 Professional machine and need to prevent users from copying data from it.  

It is used on a Standard user login, and I have an Administrator login for it.

How can I prevent USB flash drives from being used on the machine?

Is it possible to prevent CDs/DVDs from being burned?
0
Comment
Question by:RedLondon
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
  • 2
  • +1
9 Comments
 
LVL 16

Expert Comment

by:R. Andrew Koffron
ID: 37839847
http://support.microsoft.com/kb/555324
this might help.
be careful it's an old article.
0
 
LVL 17

Expert Comment

by:Anuroopsundd
ID: 37839854
0
 
LVL 17

Expert Comment

by:Anuroopsundd
ID: 37839861
To block your computer's ability to use USB Removable Disks follow these steps:

1.Open Registry Editor.
2.In Registry Editor, navigate to the following registry key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR1.Locate the following value (DWORD):
Start and give it a value of 4. Note: As always, before making changes to your registry you should always make sure you have a valid backup. In cases where you're supposed to delete or modify keys or values from the registry it is possible to first export that key or value(s) to a .REG file before performing the changes.

1.Close Registry Editor. You do not need to reboot the computer for changes to apply


http://www.petri.co.il/disable-usb-storage-devices.htm
0
Forrester Webinar: xMatters Delivers 261% ROI

Guest speaker Dean Davison, Forrester Principal Consultant, explains how a Fortune 500 communication company using xMatters found these results: Achieved a 261% ROI, Experienced $753,280 in net present value benefits over 3 years and Reduced MTTR by 91% for tier 1 incidents.

 
LVL 33

Assisted Solution

by:PowerEdgeTech
PowerEdgeTech earned 175 total points
ID: 37839889
You can block all access to removable media (CD, USB, etc.) using local policies ...

Start, type in gpedit.msc, then:
Computer Configuration (or Users Configuration), Windows Settings, Administrative Templates, System, Removable Storage Access
0
 
LVL 16

Expert Comment

by:R. Andrew Koffron
ID: 37839896
here's an article on how to do it in server 2008 I don't have access to a windows 7 machine right now to test if it's compatible but will try it soon.

http://mytricks.in/2012/04/how-to-disable-usb-drivecd-romfloppy-disk-use-in-an-windows-server-8-by-using-group-policy.html
0
 
LVL 28

Accepted Solution

by:
Run5k earned 225 total points
ID: 37839910
You can actually set a local group policy that will configure this a bit more gracefully than a manual registry edit:

Computer Configuration -> Administrative Templates -> System -> Removable Storage Access

You can potentially enable All Removable Storage classes: Deny all access, or if you want to retain a bit of flexibility, enable Removable Disks: Deny write access.
0
 
LVL 16

Assisted Solution

by:R. Andrew Koffron
R. Andrew Koffron earned 100 total points
ID: 37839961
just tested Run5k's and it's a much better method than the previous articles.

PowerEdgeTech's tech is the same with a minor mistake in the gp path just remove "(or Users Configuration), Windows Settings"
0
 
LVL 33

Assisted Solution

by:PowerEdgeTech
PowerEdgeTech earned 175 total points
ID: 37839999
(or Users Configuration) was there on purpose, as an optional course.  If you follow the same path under Users Configuration, you can set the policies per user rather than global per machine.  Probably not helpful on a single machine, but if implementing in a Domain environment, Users Configuration will allow you to block/allow access per user group rather than the entire machine, just in case there are individuals (like administrators) who should retain access.  But yes, I forgot to remove 'Windows Settings'.
0
 
LVL 28

Assisted Solution

by:Run5k
Run5k earned 225 total points
ID: 37840070
To expand upon PowerEdgeTech's good advice, if you want to configure local group policies that only affect non-administrators that is certainly possible, but it requires a few extra configuration steps:

How to Apply Local Group Policies to All Users Except Administrators

Explore the benefits of the Multiple Local Group Policy feature in Windows 7

http://technet.microsoft.com/en-us/library/cc766291(WS.10).aspx
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

When you try to extract and to view the contents of a Microsoft Update Standalone Package (MSU) for Windows Vista, you cannot extract the files from the MSU. Here we are going to explain how to extract those hotfix details without using any third pa…
On some Windows 7 (SP1) computers, Windows Update becomes super slow even the computer is reasonably fast.  There's one solution that seemed to have worked well for me (after trying a few other suggested solutions).
This Micro Tutorial will go in depth within Systems and Security in Windows 7 and will go into detail regarding Action Center, Windows Firewall, System, etc. This will be demonstrated using Windows 7 operating system.
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…

730 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question