How can I lock out USB drives on my workstations?

What is the best way to stop my users from inserting flash drives into my workstations?  Can I set up a rule that will block flash drives using active directory?

Thanks,

Jon
Jonathan SuberIT DirectorAsked:
Who is Participating?
 
cambo84Connect With a Mentor Commented:
How you go about this depends on the level of your Active Directory and the version of your clients, i.e., Windows XP or 7.  Here is a good read:

http://www.grouppolicy.biz/tag/usb/
0
 
Steven HarrisPresidentCommented:
If USB Software is already installed:

set HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsbStor to hexi value of 4

Then deny permissions to the following files:

%SystemRoot%\Inf\Usbstor.pnf
%SystemRoot%\Inf\Usbstor.inf
0
 
Jonathan SuberIT DirectorAuthor Commented:
Solution works great!
0
 
cambo84Commented:
That's great news!
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.