Solved

GPO Policy

Posted on 2013-12-13
7
402 Views
Last Modified: 2013-12-13
Already created a GPO to block USB on User setting. This GPO will only applied for a member group BlockUSB. However, the GPO can't apply successfully. Any idea ?

Tks
GPO-Policy.png
GPO-Result.png
0
Comment
Question by:AXISHK
7 Comments
 
LVL 1

Assisted Solution

by:prashantpathak
prashantpathak earned 100 total points
ID: 39716034
have you cofigured the Group policy properly. below link help you to configure.

http://www.bloggerbaru.com/how-to-block-usb-using-group-policy-on-windows-7/
0
 

Author Comment

by:AXISHK
ID: 39716047
All has been set but it seems that the GPO is filtered out. Pls refer to my attachment "GPO Result.png"


Tks
0
 
LVL 37

Accepted Solution

by:
Mahesh earned 300 total points
ID: 39716109
You should not link policy with security filtering applied to two OUs

When you use secuirty filtering, the OU on which you are applying GPO must contains those user \ computers (which are member of BlockUSB group)
Other wise they will not get the policy

Mahesh
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 

Author Comment

by:AXISHK
ID: 39716135
User location    : abc.com/HK/Dep/IT/John
Group location : abc.com/HK/Group/BlockUSB

GPO "BlockUSB" is applied to HK OU. Is that fine ?

Tks
0
 
LVL 25

Assisted Solution

by:Mohammed Khawaja
Mohammed Khawaja earned 100 total points
ID: 39716314
That is fine.  Ensure the HK OU contains the user objects (either in HK or a sub-OU in HK such as HK\Site1\Users).
0
 
LVL 37

Expert Comment

by:Mahesh
ID: 39716450
Yes, that is OK

if still you face problems, then just move that group also in same OU as users and try again

Mahesh
0
 

Author Closing Comment

by:AXISHK
ID: 39716907
Tks
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Is your Office 365 signature not working the way you want it to? Are signature updates taking up too much of your time? Let's run through the most common problems that an IT administrator can encounter when dealing with Office 365 email signatures.
While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

733 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question