Hello, everyone.

Does anybody know how can I disable USB ports and external
disk drives with Active Directory policies?

Thanks for your help.

"VEZF" <(E-Mail Removed)> wrote in message
news:774701c4766e$afb82ea0$(E-Mail Removed)...
> Hello, everyone.
>
> Does anybody know how can I disable USB ports and external
> disk drives with Active Directory policies?
>
> Thanks for your help.

According to this page:

http://www.experts-exchange.com/Netw..._20571610.html

there's no group policy available to disable USB, but there is a VBScript
Here:

http://www.heise.de/ct/ftp/result.xh...html&words=USB

that provides a workaround.

Also, there's:

http://www.protect-me.com/usb_storag...ces_risks.html

which has a clever suggestion, simply moving the DRIVER.CAB file to a
location that only Admins can access. Of course, this doesn't help if they
bring in their own drivers.

And then another idea at:

http://www.mail-archive.com/nt2000@l.../msg11158.html

"What you want to do is to create a group policy that will only allow
perhaps system or domain admin rights to the following key(s)
HKLM\System\CurrentControlSet\Service\USBhub
HKLM\System\CurrentControlSet\Service\USBuhci make sure you make the
entry start to 0
HKML\System\CurrentControlSet\Service\usbstor"

--

Mike Brown
Asset Forwarding Corp.
EPA-compliant Electronics Recycling
DoD 5220.22-M Data Elimination
http://www.assetforwarding.com

Thank you, Mike.

I'll try.

>-----Original Message-----
>"VEZF" <(E-Mail Removed)> wrote in
message
>news:774701c4766e$afb82ea0$(E-Mail Removed)...
>> Hello, everyone.
>>
>> Does anybody know how can I disable USB ports and
external
>> disk drives with Active Directory policies?
>>
>> Thanks for your help.
>
>According to this page:
>
>http://www.experts-exchange.com/Netw..._20571610.html
>
>there's no group policy available to disable USB, but
there is a VBScript
>Here:
>
>http://www.heise.de/ct/ftp/result.xhtml?
url=/ct/ftp/03/08/190/default.shtml&words=USB
>
>that provides a workaround.
>
>Also, there's:
>
>http://www.protect-me.com/usb_storag...ces_risks.html
>
>which has a clever suggestion, simply moving the
DRIVER.CAB file to a
>location that only Admins can access. Of course, this
doesn't help if they
>bring in their own drivers.
>
>And then another idea at:
>
>http://www.mail-
archive.com/(E-Mail Removed)/msg11158.html
>
>"What you want to do is to create a group policy that
will only allow
>perhaps system or domain admin rights to the following key
(s)
>HKLM\System\CurrentControlSet\Service\USBhub
>HKLM\System\CurrentControlSet\Service\USBuhci make sure
you make the
>entry start to 0
>HKML\System\CurrentControlSet\Service\usbstor"
>
>--
>
>Mike Brown
>Asset Forwarding Corp.
>EPA-compliant Electronics Recycling
>DoD 5220.22-M Data Elimination
>http://www.assetforwarding.com
>
>
>.
>