Disabling USB ports and external disk drives

V

VEZF

Hello, everyone.

Does anybody know how can I disable USB ports and external
disk drives with Active Directory policies?

Thanks for your help.
 
M

Mike Brown

VEZF said:
Hello, everyone.

Does anybody know how can I disable USB ports and external
disk drives with Active Directory policies?

Thanks for your help.

According to this page:

http://www.experts-exchange.com/Networking/Q_20571610.html

there's no group policy available to disable USB, but there is a VBScript
Here:

http://www.heise.de/ct/ftp/result.xhtml?url=/ct/ftp/03/08/190/default.shtml&words=USB

that provides a workaround.

Also, there's:

http://www.protect-me.com/usb_storage_devices_risks.html

which has a clever suggestion, simply moving the DRIVER.CAB file to a
location that only Admins can access. Of course, this doesn't help if they
bring in their own drivers.

And then another idea at:

http://www.mail-archive.com/[email protected]/msg11158.html

"What you want to do is to create a group policy that will only allow
perhaps system or domain admin rights to the following key(s)
HKLM\System\CurrentControlSet\Service\USBhub
HKLM\System\CurrentControlSet\Service\USBuhci make sure you make the
entry start to 0
HKML\System\CurrentControlSet\Service\usbstor"

--

Mike Brown
Asset Forwarding Corp.
EPA-compliant Electronics Recycling
DoD 5220.22-M Data Elimination
http://www.assetforwarding.com
 
V

VEZF

Thank you, Mike.

I'll try.
-----Original Message-----


According to this page:

http://www.experts-exchange.com/Networking/Q_20571610.html

there's no group policy available to disable USB, but there is a VBScript
Here:

http://www.heise.de/ct/ftp/result.xhtml? url=/ct/ftp/03/08/190/default.shtml&words=USB

that provides a workaround.

Also, there's:

http://www.protect-me.com/usb_storage_devices_risks.html

which has a clever suggestion, simply moving the DRIVER.CAB file to a
location that only Admins can access. Of course, this doesn't help if they
bring in their own drivers.

And then another idea at:

http://www.mail- archive.com/[email protected]/msg11158.html

"What you want to do is to create a group policy that will only allow
perhaps system or domain admin rights to the following key (s)
HKLM\System\CurrentControlSet\Service\USBhub
HKLM\System\CurrentControlSet\Service\USBuhci make sure you make the
entry start to 0
HKML\System\CurrentControlSet\Service\usbstor"

--

Mike Brown
Asset Forwarding Corp.
EPA-compliant Electronics Recycling
DoD 5220.22-M Data Elimination
http://www.assetforwarding.com


.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top