Solved

How to disable usb reading and cd burning function by windows 2003 DC server group policy to all client pc?

Posted on 2014-07-31
3
333 Views
Last Modified: 2014-08-21
How to disable usb reading and cd burning function by windows 2003 DC server group policy to all client pc?
0
Comment
Question by:litmic
3 Comments
 
LVL 17

Accepted Solution

by:
Emmanuel Adebayo earned 300 total points
ID: 40231345
By default, Group Policy in Windows 2003 does not offer a facility to easily disable drives containing removable media, such as USB ports, CD-ROM drives, Floppy Disk drives and high capacity LS-120 floppy drives.
However, Group Policy can be extended to use customised settings by applying an ADM template. The ADM template in this article allows an Administrator to disable the respective drivers of these devices, ensuring that they cannot be used.

For more information on how to do this, check the link below

http://support.microsoft.com/kb/555324

Regards
0
 

Author Comment

by:litmic
ID: 40231405
more detail is 2003 server,  clients are windows 7, I want to

- disable the client pc USB access

- disable the client pc CD/DVD writer burning function, only allow CD/ DVD read function.
0
 
LVL 62

Expert Comment

by:gheist
ID: 40231450
USB drives inherit permission from .inf file that has driver inside.
CD write cannot be easily disabled (you can disable wmplayer writer, but any other writing application will ignore GPO)

Dedicated data thief can boot their flash hard drive and dump your data there, no usb, no cd, no trails.
0

Featured Post

Backup Your Microsoft Windows Server®

Backup all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

INTRODUCTION The purpose of this document is to demonstrate the Installation and configuration of the Data Protection Manager product. Note that this demonstration was prepared on the basis of Windows OS is 2008 R2 and DPM 2010. DATA PROTECTI…
This is a guide to the following problem (not exclusive but here) on Windows: Users need our support and we supporters often use global administrative accounts to do this. Using these accounts safely is a real challenge. Any admin who takes se…
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question