How can I lock out USB drives on my workstations?

What is the best way to stop my users from inserting flash drives into my workstations?  Can I set up a rule that will block flash drives using active directory?


Jonathan SuberIT DirectorAsked:
Who is Participating?
cambo84Connect With a Mentor Commented:
How you go about this depends on the level of your Active Directory and the version of your clients, i.e., Windows XP or 7.  Here is a good read:
Steven HarrisPresidentCommented:
If USB Software is already installed:

set HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsbStor to hexi value of 4

Then deny permissions to the following files:

Jonathan SuberIT DirectorAuthor Commented:
Solution works great!
That's great news!
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.