Solved

GPO Policy

Posted on 2013-12-13
7
404 Views
Last Modified: 2013-12-13
Already created a GPO to block USB on User setting. This GPO will only applied for a member group BlockUSB. However, the GPO can't apply successfully. Any idea ?

Tks
GPO-Policy.png
GPO-Result.png
0
Comment
Question by:AXISHK
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
7 Comments
 
LVL 1

Assisted Solution

by:prashantpathak
prashantpathak earned 100 total points
ID: 39716034
have you cofigured the Group policy properly. below link help you to configure.

http://www.bloggerbaru.com/how-to-block-usb-using-group-policy-on-windows-7/
0
 

Author Comment

by:AXISHK
ID: 39716047
All has been set but it seems that the GPO is filtered out. Pls refer to my attachment "GPO Result.png"


Tks
0
 
LVL 37

Accepted Solution

by:
Mahesh earned 300 total points
ID: 39716109
You should not link policy with security filtering applied to two OUs

When you use secuirty filtering, the OU on which you are applying GPO must contains those user \ computers (which are member of BlockUSB group)
Other wise they will not get the policy

Mahesh
0
Office 365 Training for IT Pros

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

 

Author Comment

by:AXISHK
ID: 39716135
User location    : abc.com/HK/Dep/IT/John
Group location : abc.com/HK/Group/BlockUSB

GPO "BlockUSB" is applied to HK OU. Is that fine ?

Tks
0
 
LVL 25

Assisted Solution

by:Mohammed Khawaja
Mohammed Khawaja earned 100 total points
ID: 39716314
That is fine.  Ensure the HK OU contains the user objects (either in HK or a sub-OU in HK such as HK\Site1\Users).
0
 
LVL 37

Expert Comment

by:Mahesh
ID: 39716450
Yes, that is OK

if still you face problems, then just move that group also in same OU as users and try again

Mahesh
0
 

Author Closing Comment

by:AXISHK
ID: 39716907
Tks
0

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article outlines the process to identify and resolve account lockout in an Active Directory environment.
This article demonstrates probably the easiest way to configure domain-wide tier isolation within Active Directory. If you do not know tier isolation read https://technet.microsoft.com/en-us/windows-server-docs/security/securing-privileged-access/s…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question