group policy usb ports block

apollo-13
apollo-13 used Ask the Experts™
on
i plan to block USB port all my computers at my network excepts my server.

how can i do that under group policy?
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
If you have Vista or newer, there are built in settings you can import from a Vista ADM template.  The GP path to those settings are \Computer Configuration\Policies\Administrative Templates\System\Removable Storage Access.

If you need more details on how to import the ADM template and other information see here: http://www.petri.co.il/disable_usb_disks_with_gpo.htm
Top Expert 2016
Commented:
I'm guessing that you only want to disable usb keys and not keyboards or usb printers

Open GPMC – User configuration – Policy – Administrative template – System – Removable storage Access.
Enable deny Read/Write Access.

Author

Commented:
I'm guessing that you only want to disable usb keys and not keyboards or usb printers---- YOU ARE ABSOLUT RIGHTTTTTTTTTTTT, i do not want block keyboard and mouse usb ports
CompTIA Security+

Learn the essential functions of CompTIA Security+, which establishes the core knowledge required of any cybersecurity role and leads professionals into intermediate-level cybersecurity jobs.

Author

Commented:
can you please give me screenshot if possible?

Open GPMC – User configuration – Policy – Administrative template – System – Removable storage Access.
Enable deny Read/Write Access.

Author

Commented:
Open GPMC – User configuration  ???

Author

Commented:
thanks

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial