?
Solved

GPO Policy

Posted on 2013-12-13
7
Medium Priority
?
407 Views
Last Modified: 2013-12-13
Already created a GPO to block USB on User setting. This GPO will only applied for a member group BlockUSB. However, the GPO can't apply successfully. Any idea ?

Tks
GPO-Policy.png
GPO-Result.png
0
Comment
Question by:AXISHK
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
7 Comments
 
LVL 1

Assisted Solution

by:prashantpathak
prashantpathak earned 400 total points
ID: 39716034
have you cofigured the Group policy properly. below link help you to configure.

http://www.bloggerbaru.com/how-to-block-usb-using-group-policy-on-windows-7/
0
 

Author Comment

by:AXISHK
ID: 39716047
All has been set but it seems that the GPO is filtered out. Pls refer to my attachment "GPO Result.png"


Tks
0
 
LVL 37

Accepted Solution

by:
Mahesh earned 1200 total points
ID: 39716109
You should not link policy with security filtering applied to two OUs

When you use secuirty filtering, the OU on which you are applying GPO must contains those user \ computers (which are member of BlockUSB group)
Other wise they will not get the policy

Mahesh
0
Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

 

Author Comment

by:AXISHK
ID: 39716135
User location    : abc.com/HK/Dep/IT/John
Group location : abc.com/HK/Group/BlockUSB

GPO "BlockUSB" is applied to HK OU. Is that fine ?

Tks
0
 
LVL 25

Assisted Solution

by:Mohammed Khawaja
Mohammed Khawaja earned 400 total points
ID: 39716314
That is fine.  Ensure the HK OU contains the user objects (either in HK or a sub-OU in HK such as HK\Site1\Users).
0
 
LVL 37

Expert Comment

by:Mahesh
ID: 39716450
Yes, that is OK

if still you face problems, then just move that group also in same OU as users and try again

Mahesh
0
 

Author Closing Comment

by:AXISHK
ID: 39716907
Tks
0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A company’s centralized system that manages user data, security, and distributed resources is often a focus of criminal attention. Active Directory (AD) is no exception. In truth, it’s even more likely to be targeted due to the number of companies …
Group policies can be applied selectively to specific devices with the help of groups. Utilising this, it is possible to phase-in group policies, over a period of time, by randomly adding non-members user or computers at a set interval, to a group f…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Suggested Courses

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question