Solved

Server 2012 AD How to block USB drive access using GPO

Posted on 2015-02-04
4
802 Views
Last Modified: 2015-02-04
We have to block access to USB drives on domain computers. We're running Windows 7 and Server 2012 AD. I've seen various articles but none seem to help with 2012. I've looked in GP but don't see \User Configuration\Policies\Administrative Templates\System\Removable Storage Access or the same one under \Computer\

I just don't see Removable Storage Access anywhere to disable and I can't find anything specific to Windows 2012 on this.
0
Comment
Question by:scubadiver_dave
  • 3
4 Comments
 

Author Comment

by:scubadiver_dave
ID: 40588770
I think part of the problem is..

\Computer\Administrative Templates: Policy definitions (ADMX files) retrieved from the central store.

At some point we added some ADM templates to deal with various Office GPOs. Now we don't see the default ones like Removable Storage Access.

How can I get that back?
0
 

Author Comment

by:scubadiver_dave
ID: 40588877
I'm getting closer but can't find any current articles on who to copy ADMX files for server 2012 to the central store. All the articles are old and talk about 2008. I'm getting access denied when I try to copy the new ADMX files for Windows 8.1 and 2012 to the sysvol share.
0
 
LVL 4

Accepted Solution

by:
Praveen Kumar Bonala earned 500 total points
ID: 40588941
Hi,
please check this link. Here you will get step by step process.

https://4sysops.com/archives/how-to-disable-usb-drive-use-in-an-active-directory-domain/
0
 

Author Comment

by:scubadiver_dave
ID: 40588953
Thanks. I've seen articles about how to do it. My problem was that the GPO wasn't there. I had to download and install newer ADMX files and was having a security issue at first because I was trying to copy the new ADMX files to a UNC path instead of just using c:\windows\sysvol.

It's all good now and I can see the GPO.
0

Featured Post

Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

Join & Write a Comment

When you start your Windows 10 PC and got an "Operating system not found" error or just saw  "Auto repair for startup". After a while, you have entered a loop for Auto repair which does not fix anything and you will be in a  panic as all your work w…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This Micro Tutorial will teach you how to the overview of Microsoft Security Essentials. This is a free anti-virus software that guards your PC against viruses, spyware, worms, and other malicious software. This will be demonstrated using Windows…
This Micro Tutorial will go in depth within Systems and Security in Windows 7 and will go into detail regarding Action Center, Windows Firewall, System, etc. This will be demonstrated using Windows 7 operating system.

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now