<div>
If USB Software is already installed:<br />
<br />
set HKEY_LOCAL_MACHINE\SYSTEM\<wbr />CurrentCon<wbr />trolSet\Se<wbr />rvices\Usb<wbr />Stor to hexi value of 4<br />
<br />
Then deny permissions to the following files:<br />
<br />
%SystemRoot%\Inf\Usbstor.p<wbr />nf<br />
%SystemRoot%\Inf\Usbstor.i<wbr />nf
</div>


If USB Software is already installed:

set HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsbStor to hexi value of 4

Then deny permissions to the following files:

%SystemRoot%\Inf\Usbstor.pnf
%SystemRoot%\Inf\Usbstor.inf

<div>
<div class="content wysiwyg-content">
What is the best way to stop my users from inserting flash drives into my workstations? &nbsp;Can I set up a rule that will block flash drives using active directory?<br />
<br />
Thanks,<br />
<br />
Jon
</div>
</div>


What is the best way to stop my users from inserting flash drives into my workstations?  Can I set up a rule that will block flash drives using active directory?

Thanks,

Jon

How can I lock out USB drives on my workstations?

The Microsoft Legacy Operating System topic includes legacy versions of Microsoft operating systems prior to Windows 2000: All versions of MS-DOS and other versions developed for specific manufacturers and Windows 3/3.1, Windows 95 and Windows 98, plus any other Windows-related versions, and Windows Mobile.

Microsoft Legacy OS

The Microsoft Server topic includes all of the legacy versions of the operating system, including the Windows NT 3.1, NT 3.5, NT 4.0 and Windows 2000 and Windows Home Server versions.

Microsoft Server OS

Windows Server 2008 and Windows Server 2008 R2, based on the Microsoft Vista codebase, is the last 32-bit server operating system released by Microsoft. It has a number of versions, including including Foundation, Standard, Enterprise, Datacenter, Web, HPC Server, Itanium and Storage; new features included server core installation and Hyper-V.