How to disable usb reading and cd burning function by windows 2003 DC server group policy to all client pc?

How to disable usb reading and cd burning function by windows 2003 DC server group policy to all client pc?
litmicAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Emmanuel AdebayoGlobal Windows Infrastructure Engineer - ConsultantCommented:
By default, Group Policy in Windows 2003 does not offer a facility to easily disable drives containing removable media, such as USB ports, CD-ROM drives, Floppy Disk drives and high capacity LS-120 floppy drives.
However, Group Policy can be extended to use customised settings by applying an ADM template. The ADM template in this article allows an Administrator to disable the respective drivers of these devices, ensuring that they cannot be used.

For more information on how to do this, check the link below

http://support.microsoft.com/kb/555324

Regards
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
litmicAuthor Commented:
more detail is 2003 server,  clients are windows 7, I want to

- disable the client pc USB access

- disable the client pc CD/DVD writer burning function, only allow CD/ DVD read function.
0
gheistCommented:
USB drives inherit permission from .inf file that has driver inside.
CD write cannot be easily disabled (you can disable wmplayer writer, but any other writing application will ignore GPO)

Dedicated data thief can boot their flash hard drive and dump your data there, no usb, no cd, no trails.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Legacy OS

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.