Link to home
Start Free TrialLog in
Avatar of scubadiver_dave
scubadiver_daveFlag for United States of America

asked on

Server 2012 AD How to block USB drive access using GPO

We have to block access to USB drives on domain computers. We're running Windows 7 and Server 2012 AD. I've seen various articles but none seem to help with 2012. I've looked in GP but don't see \User Configuration\Policies\Administrative Templates\System\Removable Storage Access or the same one under \Computer\

I just don't see Removable Storage Access anywhere to disable and I can't find anything specific to Windows 2012 on this.
Avatar of scubadiver_dave
scubadiver_dave
Flag of United States of America image

ASKER

I think part of the problem is..

\Computer\Administrative Templates: Policy definitions (ADMX files) retrieved from the central store.

At some point we added some ADM templates to deal with various Office GPOs. Now we don't see the default ones like Removable Storage Access.

How can I get that back?
I'm getting closer but can't find any current articles on who to copy ADMX files for server 2012 to the central store. All the articles are old and talk about 2008. I'm getting access denied when I try to copy the new ADMX files for Windows 8.1 and 2012 to the sysvol share.
ASKER CERTIFIED SOLUTION
Avatar of Praveen Kumar Bonala
Praveen Kumar Bonala
Flag of India image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Thanks. I've seen articles about how to do it. My problem was that the GPO wasn't there. I had to download and install newer ADMX files and was having a security issue at first because I was trying to copy the new ADMX files to a UNC path instead of just using c:\windows\sysvol.

It's all good now and I can see the GPO.