Solved

How can I lock out USB drives on my workstations?

Posted on 2013-10-29
4
298 Views
Last Modified: 2013-10-29
What is the best way to stop my users from inserting flash drives into my workstations?  Can I set up a rule that will block flash drives using active directory?

Thanks,

Jon
0
Comment
Question by:jsuber-tchd
  • 2
4 Comments
 
LVL 18

Expert Comment

by:Steven Harris
ID: 39609269
If USB Software is already installed:

set HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsbStor to hexi value of 4

Then deny permissions to the following files:

%SystemRoot%\Inf\Usbstor.pnf
%SystemRoot%\Inf\Usbstor.inf
0
 
LVL 1

Accepted Solution

by:
cambo84 earned 500 total points
ID: 39609299
How you go about this depends on the level of your Active Directory and the version of your clients, i.e., Windows XP or 7.  Here is a good read:

http://www.grouppolicy.biz/tag/usb/
0
 

Author Closing Comment

by:jsuber-tchd
ID: 39609364
Solution works great!
0
 
LVL 1

Expert Comment

by:cambo84
ID: 39609463
That's great news!
0

Featured Post

What Security Threats Are You Missing?

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

INTRODUCTION The purpose of this document is to demonstrate the Installation and configuration of the Data Protection Manager product. Note that this demonstration was prepared on the basis of Windows OS is 2008 R2 and DPM 2010. DATA PROTECTI…
The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now