Solved

Server 2012 AD How to block USB drive access using GPO

Posted on 2015-02-04
4
897 Views
Last Modified: 2015-02-04
We have to block access to USB drives on domain computers. We're running Windows 7 and Server 2012 AD. I've seen various articles but none seem to help with 2012. I've looked in GP but don't see \User Configuration\Policies\Administrative Templates\System\Removable Storage Access or the same one under \Computer\

I just don't see Removable Storage Access anywhere to disable and I can't find anything specific to Windows 2012 on this.
0
Comment
Question by:scubadiver_dave
  • 3
4 Comments
 

Author Comment

by:scubadiver_dave
ID: 40588770
I think part of the problem is..

\Computer\Administrative Templates: Policy definitions (ADMX files) retrieved from the central store.

At some point we added some ADM templates to deal with various Office GPOs. Now we don't see the default ones like Removable Storage Access.

How can I get that back?
0
 

Author Comment

by:scubadiver_dave
ID: 40588877
I'm getting closer but can't find any current articles on who to copy ADMX files for server 2012 to the central store. All the articles are old and talk about 2008. I'm getting access denied when I try to copy the new ADMX files for Windows 8.1 and 2012 to the sysvol share.
0
 
LVL 4

Accepted Solution

by:
Praveen Kumar Bonala earned 500 total points
ID: 40588941
Hi,
please check this link. Here you will get step by step process.

https://4sysops.com/archives/how-to-disable-usb-drive-use-in-an-active-directory-domain/
0
 

Author Comment

by:scubadiver_dave
ID: 40588953
Thanks. I've seen articles about how to do it. My problem was that the GPO wasn't there. I had to download and install newer ADMX files and was having a security issue at first because I was trying to copy the new ADMX files to a UNC path instead of just using c:\windows\sysvol.

It's all good now and I can see the GPO.
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

When you start your Windows 10 PC and got an "Operating system not found" error or just saw  "Auto repair for startup" or a blinking cursor with black screen. A loop for Auto repair will start but fix nothing.  You will be panic as there are no back…
When you try to extract and to view the contents of a Microsoft Update Standalone Package (MSU) for Windows Vista, you cannot extract the files from the MSU. Here we are going to explain how to extract those hotfix details without using any third pa…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This Micro Tutorial will teach you how to the overview of Microsoft Security Essentials. This is a free anti-virus software that guards your PC against viruses, spyware, worms, and other malicious software. This will be demonstrated using Windows…

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question