?
Solved

How to disable usb reading and cd burning function by windows 2003 DC server group policy to all client pc?

Posted on 2014-07-31
3
Medium Priority
?
370 Views
Last Modified: 2014-08-21
How to disable usb reading and cd burning function by windows 2003 DC server group policy to all client pc?
0
Comment
Question by:litmic
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 18

Accepted Solution

by:
Emmanuel Adebayo earned 900 total points
ID: 40231345
By default, Group Policy in Windows 2003 does not offer a facility to easily disable drives containing removable media, such as USB ports, CD-ROM drives, Floppy Disk drives and high capacity LS-120 floppy drives.
However, Group Policy can be extended to use customised settings by applying an ADM template. The ADM template in this article allows an Administrator to disable the respective drivers of these devices, ensuring that they cannot be used.

For more information on how to do this, check the link below

http://support.microsoft.com/kb/555324

Regards
0
 

Author Comment

by:litmic
ID: 40231405
more detail is 2003 server,  clients are windows 7, I want to

- disable the client pc USB access

- disable the client pc CD/DVD writer burning function, only allow CD/ DVD read function.
0
 
LVL 62

Expert Comment

by:gheist
ID: 40231450
USB drives inherit permission from .inf file that has driver inside.
CD write cannot be easily disabled (you can disable wmplayer writer, but any other writing application will ignore GPO)

Dedicated data thief can boot their flash hard drive and dump your data there, no usb, no cd, no trails.
0

Featured Post

Need protection from advanced malware attacks?

Look no further than WatchGuard's Total Security Suite, providing defense in depth against today's most headlining attacks like Petya 2.0 and WannaCry. Keep your organization out of the news with protection from known and unknown threats.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Security measures require Windows be logged in using Standard User login (not Administrator).  Yet, sometimes an application has to be run “As Administrator” from a Standard User login.  This paper describes how to create a shortcut icon to launch a…
Ever notice how you can't use a new drive in Windows without having Windows assigning a Disk Signature?  Ever have a signature collision problem (especially with Virtual Machines?)  This article is intended to help you understand what's going on and…
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…
Suggested Courses
Course of the Month13 days, 13 hours left to enroll

801 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question