Solved

GPO Policy

Posted on 2013-12-13
7
400 Views
Last Modified: 2013-12-13
Already created a GPO to block USB on User setting. This GPO will only applied for a member group BlockUSB. However, the GPO can't apply successfully. Any idea ?

Tks
GPO-Policy.png
GPO-Result.png
0
Comment
Question by:AXISHK
7 Comments
 
LVL 1

Assisted Solution

by:prashantpathak
prashantpathak earned 100 total points
ID: 39716034
have you cofigured the Group policy properly. below link help you to configure.

http://www.bloggerbaru.com/how-to-block-usb-using-group-policy-on-windows-7/
0
 

Author Comment

by:AXISHK
ID: 39716047
All has been set but it seems that the GPO is filtered out. Pls refer to my attachment "GPO Result.png"


Tks
0
 
LVL 36

Accepted Solution

by:
Mahesh earned 300 total points
ID: 39716109
You should not link policy with security filtering applied to two OUs

When you use secuirty filtering, the OU on which you are applying GPO must contains those user \ computers (which are member of BlockUSB group)
Other wise they will not get the policy

Mahesh
0
Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

 

Author Comment

by:AXISHK
ID: 39716135
User location    : abc.com/HK/Dep/IT/John
Group location : abc.com/HK/Group/BlockUSB

GPO "BlockUSB" is applied to HK OU. Is that fine ?

Tks
0
 
LVL 25

Assisted Solution

by:Mohammed Khawaja
Mohammed Khawaja earned 100 total points
ID: 39716314
That is fine.  Ensure the HK OU contains the user objects (either in HK or a sub-OU in HK such as HK\Site1\Users).
0
 
LVL 36

Expert Comment

by:Mahesh
ID: 39716450
Yes, that is OK

if still you face problems, then just move that group also in same OU as users and try again

Mahesh
0
 

Author Closing Comment

by:AXISHK
ID: 39716907
Tks
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Find out how to use Active Directory data for email signature management in Microsoft Exchange and Office 365.
This script can help you clean up your user profile database by comparing profiles to Active Directory users in a particular OU, and removing the profiles that don't match.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question