?
Solved

Disable removable devices for a limited number of users in SBS 2011

Posted on 2012-12-28
3
Medium Priority
?
211 Views
Last Modified: 2014-12-14
I have created a group policy object to disable removable media.  I want to apply this policy to all users on the SBS 2011 box except for a couple of users.  What's the best way to do that without breaking the SBS Console?
0
Comment
Question by:tgustaf
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 13

Expert Comment

by:upalakshitha
ID: 38727088
so apply it to all users & add deny users individualy you want to except

what did you mean ?  "without breaking the SBS Consol "
0
 
LVL 4

Expert Comment

by:Jernej Navotnik
ID: 38727124
Hey!

Sorry for my bad English.

My approach would be:
- create a new security group in SBS console (but you can create one manually also, it won't break the console)
- add the users you wish to the group
- and would assign the GPO to that group only

And that is it.

Best regards, Jernej
0
 
LVL 47

Accepted Solution

by:
Donald Stewart earned 2000 total points
ID: 38727255
Look over

http://4sysops.com/archives/how-to-disable-usb-drive-use-in-an-active-directory-domain/


NOTE: If you prefer to set these restrictions on a per-user basis instead of computer-wide, then use the Group Policy path \User Configuration\Policies\Administrative Templates\System\Removable Storage Access.
0

Featured Post

Get real performance insights from real users

Key features:
- Total Pages Views and Load times
- Top Pages Viewed and Load Times
- Real Time Site Page Build Performance
- Users’ Browser and Platform Performance
- Geographic User Breakdown
- And more

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Auditing domain password hashes is a commonly overlooked but critical requirement to ensuring secure passwords practices are followed. Methods exist to extract hashes directly for a live domain however this article describes a process to extract u…
Here's a look at newsworthy articles and community happenings during the last month.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…
Suggested Courses
Course of the Month12 days, 13 hours left to enroll

777 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question