Solved

How to disable usb reading and cd burning function by windows 2003 DC server group policy to all client pc?

Posted on 2014-07-31
3
357 Views
Last Modified: 2014-08-21
How to disable usb reading and cd burning function by windows 2003 DC server group policy to all client pc?
0
Comment
Question by:litmic
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 17

Accepted Solution

by:
Emmanuel Adebayo earned 300 total points
ID: 40231345
By default, Group Policy in Windows 2003 does not offer a facility to easily disable drives containing removable media, such as USB ports, CD-ROM drives, Floppy Disk drives and high capacity LS-120 floppy drives.
However, Group Policy can be extended to use customised settings by applying an ADM template. The ADM template in this article allows an Administrator to disable the respective drivers of these devices, ensuring that they cannot be used.

For more information on how to do this, check the link below

http://support.microsoft.com/kb/555324

Regards
0
 

Author Comment

by:litmic
ID: 40231405
more detail is 2003 server,  clients are windows 7, I want to

- disable the client pc USB access

- disable the client pc CD/DVD writer burning function, only allow CD/ DVD read function.
0
 
LVL 62

Expert Comment

by:gheist
ID: 40231450
USB drives inherit permission from .inf file that has driver inside.
CD write cannot be easily disabled (you can disable wmplayer writer, but any other writing application will ignore GPO)

Dedicated data thief can boot their flash hard drive and dump your data there, no usb, no cd, no trails.
0

Featured Post

Increase Agility with Enabled Toolchains

Connect your existing build, deployment, management, monitoring, and collaboration platforms. From Puppet to Chef, HipChat to Slack, ServiceNow to JIRA, Splunk to New Relic and beyond, hand off data between systems to engage the right people.

Connect with xMatters.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

INTRODUCTION The purpose of this document is to demonstrate the Installation and configuration of the Data Protection Manager product. Note that this demonstration was prepared on the basis of Windows OS is 2008 R2 and DPM 2010. DATA PROTECTI…
Ever notice how you can't use a new drive in Windows without having Windows assigning a Disk Signature?  Ever have a signature collision problem (especially with Virtual Machines?)  This article is intended to help you understand what's going on and…
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

695 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question