Solved

How can I lock out USB drives on my workstations?

Posted on 2013-10-29
4
302 Views
Last Modified: 2013-10-29
What is the best way to stop my users from inserting flash drives into my workstations?  Can I set up a rule that will block flash drives using active directory?

Thanks,

Jon
0
Comment
Question by:jsuber-tchd
  • 2
4 Comments
 
LVL 18

Expert Comment

by:Steven Harris
ID: 39609269
If USB Software is already installed:

set HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsbStor to hexi value of 4

Then deny permissions to the following files:

%SystemRoot%\Inf\Usbstor.pnf
%SystemRoot%\Inf\Usbstor.inf
0
 
LVL 1

Accepted Solution

by:
cambo84 earned 500 total points
ID: 39609299
How you go about this depends on the level of your Active Directory and the version of your clients, i.e., Windows XP or 7.  Here is a good read:

http://www.grouppolicy.biz/tag/usb/
0
 

Author Closing Comment

by:jsuber-tchd
ID: 39609364
Solution works great!
0
 
LVL 1

Expert Comment

by:cambo84
ID: 39609463
That's great news!
0

Featured Post

Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Remote Apps is a feature in server 2008 which allows users to run applications off Remote Desktop Servers without having to log into them to run the applications.  The user can either have a desktop shortcut installed or go through the web portal to…
Ever notice how you can't use a new drive in Windows without having Windows assigning a Disk Signature?  Ever have a signature collision problem (especially with Virtual Machines?)  This article is intended to help you understand what's going on and…
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

792 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question