• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 319
  • Last Modified:

How can I lock out USB drives on my workstations?

What is the best way to stop my users from inserting flash drives into my workstations?  Can I set up a rule that will block flash drives using active directory?

Thanks,

Jon
0
Jonathan Suber
Asked:
Jonathan Suber
  • 2
1 Solution
 
Steven HarrisPresidentCommented:
If USB Software is already installed:

set HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsbStor to hexi value of 4

Then deny permissions to the following files:

%SystemRoot%\Inf\Usbstor.pnf
%SystemRoot%\Inf\Usbstor.inf
0
 
cambo84Commented:
How you go about this depends on the level of your Active Directory and the version of your clients, i.e., Windows XP or 7.  Here is a good read:

http://www.grouppolicy.biz/tag/usb/
0
 
Jonathan SuberIT DirectorAuthor Commented:
Solution works great!
0
 
cambo84Commented:
That's great news!
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now