?
Solved

group policy usb ports block

Posted on 2014-02-27
7
Medium Priority
?
475 Views
Last Modified: 2014-03-17
i plan to block USB port all my computers at my network excepts my server.

how can i do that under group policy?
0
Comment
Question by:apollo-13
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2
7 Comments
 
LVL 10

Accepted Solution

by:
convergint earned 1000 total points
ID: 39894147
If you have Vista or newer, there are built in settings you can import from a Vista ADM template.  The GP path to those settings are \Computer Configuration\Policies\Administrative Templates\System\Removable Storage Access.

If you need more details on how to import the ADM template and other information see here: http://www.petri.co.il/disable_usb_disks_with_gpo.htm
0
 
LVL 82

Assisted Solution

by:David Johnson, CD, MVP
David Johnson, CD, MVP earned 1000 total points
ID: 39894163
I'm guessing that you only want to disable usb keys and not keyboards or usb printers

Open GPMC – User configuration – Policy – Administrative template – System – Removable storage Access.
Enable deny Read/Write Access.
0
 

Author Comment

by:apollo-13
ID: 39894376
I'm guessing that you only want to disable usb keys and not keyboards or usb printers---- YOU ARE ABSOLUT RIGHTTTTTTTTTTTT, i do not want block keyboard and mouse usb ports
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 

Author Comment

by:apollo-13
ID: 39894457
can you please give me screenshot if possible?

Open GPMC – User configuration – Policy – Administrative template – System – Removable storage Access.
Enable deny Read/Write Access.
0
 

Author Comment

by:apollo-13
ID: 39894816
Open GPMC – User configuration  ???
0
 
LVL 10

Expert Comment

by:convergint
ID: 39895226
Screenshot
0
 

Author Comment

by:apollo-13
ID: 39900046
thanks
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This article explains how to install and use the NTBackup utility that comes with Windows Server.
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…
Suggested Courses

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question