Solved

Group Policy server 2003

Posted on 2014-04-22
3
455 Views
Last Modified: 2014-05-05
I want to implement a group policy on WIN server 2003 to prevent mounting of USB hard drives on windows xp machines and WIN 7 machines. There is no Group policy to implement this by default. What needs to be done to accomplish this?
0
Comment
Question by:KonfigurationKing
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 25

Expert Comment

by:Tony Giangreco
ID: 40016481
0
 
LVL 5

Accepted Solution

by:
Recept earned 500 total points
ID: 40016658
You can either use this method - http://www.petri.co.il/disable_usb_disks_with_gpo.htm


Or you can use Group Policy Preferences (GPP). On a Windows Server 2003 environment to create and link the GPP you will either a Windows Server 2008/R2 server or a Windows Vista with Service Pack 1/Windows 7 client with Remote Server Administration Tools (RSAT) update installed.

RSAT for Windows Vista
http://www.microsoft.com/downloads/details.aspx?FamilyId=9FF6E897-23CE-4A36-B7FC-D52065DE9960&displaylang=en

RSAT for Windows 7
http://www.microsoft.com/downloads/details.aspx?FamilyID=7D2F6AD7-656B-4313-A005-4E344E43997D&displaylang=en

Disable Adding USB Drive and Memory Sticks via Group Policy and Group Policy Preferences
http://blogs.technet.com/b/danstolts/archive/2009/01/21/disable-adding-usb-drive-and-memory-sticks-via-group-policy-and-group-policy-preferences.aspx

Once you've created and linked the Group Policy Preference your Windows 7 machines will work but the Windows XP machines will need to have Group Policy Preferences Client Side Extensions installed.


The Group Policy Preference can either be part of the Default Domain GPO or you could create and link a new GPO elsewhere in your Organisational Unit (OU) structure.
0
 

Author Closing Comment

by:KonfigurationKing
ID: 40043372
Perfect instructions with the link provided!! Thanks!!!
0

Featured Post

Salesforce Made Easy to Use

On-screen guidance at the moment of need enables you & your employees to focus on the core, you can now boost your adoption rates swiftly and simply with one easy tool.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

By default the complete memory dump option is disabled in windows . If we want to enable the complete memory dump for a diagnostic purpose, we have a solution for it. here we are using the registry method to enable this.
The Windows functions GetTickCount and timeGetTime retrieve the number of milliseconds since the system was started. However, the value is stored in a DWORD, which means that it wraps around to zero every 49.7 days. This article shows how to solve t…
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…
The viewer will learn how to successfully download and install the SARDU utility on Windows 7, without downloading adware.

738 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question