Solved

Server 2012 AD How to block USB drive access using GPO

Posted on 2015-02-04
4
1,119 Views
Last Modified: 2015-02-04
We have to block access to USB drives on domain computers. We're running Windows 7 and Server 2012 AD. I've seen various articles but none seem to help with 2012. I've looked in GP but don't see \User Configuration\Policies\Administrative Templates\System\Removable Storage Access or the same one under \Computer\

I just don't see Removable Storage Access anywhere to disable and I can't find anything specific to Windows 2012 on this.
0
Comment
Question by:scubadiver_dave
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
4 Comments
 

Author Comment

by:scubadiver_dave
ID: 40588770
I think part of the problem is..

\Computer\Administrative Templates: Policy definitions (ADMX files) retrieved from the central store.

At some point we added some ADM templates to deal with various Office GPOs. Now we don't see the default ones like Removable Storage Access.

How can I get that back?
0
 

Author Comment

by:scubadiver_dave
ID: 40588877
I'm getting closer but can't find any current articles on who to copy ADMX files for server 2012 to the central store. All the articles are old and talk about 2008. I'm getting access denied when I try to copy the new ADMX files for Windows 8.1 and 2012 to the sysvol share.
0
 
LVL 4

Accepted Solution

by:
Praveen Kumar Bonala earned 500 total points
ID: 40588941
Hi,
please check this link. Here you will get step by step process.

https://4sysops.com/archives/how-to-disable-usb-drive-use-in-an-active-directory-domain/
0
 

Author Comment

by:scubadiver_dave
ID: 40588953
Thanks. I've seen articles about how to do it. My problem was that the GPO wasn't there. I had to download and install newer ADMX files and was having a security issue at first because I was trying to copy the new ADMX files to a UNC path instead of just using c:\windows\sysvol.

It's all good now and I can see the GPO.
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
On some Windows 7 (SP1) computers, Windows Update becomes super slow even the computer is reasonably fast.  There's one solution that seemed to have worked well for me (after trying a few other suggested solutions).
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This Micro Tutorial will give you a basic overview of Windows DVD Burner through its features and interface. This will be demonstrated using Windows 7 operating system.

627 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question