Link to home
Start Free TrialLog in
Avatar of lanman777
lanman777

asked on

How do I block the usage of USB ports on Windows 7. Can I do it with a GPO?

How do I block the usage of USB ports on Windows 7. Can I do it with a GPO? This is in a Windows 2008 AD environment.
ASKER CERTIFIED SOLUTION
Avatar of Mike Kline
Mike Kline
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
If you are concerned about USB storage then what Mike has suggested is enough
But if you want to block all the USB then you may go with below

You can call devcon.exe from the logon script 'GPO' and disable the
USB port. !!! Don't forget to activate the usb port with the logoff script.

Get devcon.exe & m$ doc at :
http://support.microsoft.com/support.../q311/2/72.asp
Some examples :
http://www.osr.com/ddk/ddtools/devcon_86er.htm

Example :
LOGON => devcon /r disable USB*
LOGOFF => devcon /r enable USB*


!!! If the user have admin rights he can go to the device manager applet
and rescan/enable the usb device : ( .

http://www.pcreview.co.uk/forums/disabeling-usb-ports-using-gpo-t1449506.html
Since you are running windows 7 and AD 2008 try this link
http://technet.microsoft.com/en-us/library/cc730808(v=ws.10).aspx