ADM files

[Nobby Graham]

Trying to implement this ADM file to disable USB drives.
When I load it through Group Policy - Administrative
Templates on Windows 2000 the values do not appear any
ideas?

Thanks!

CLASS MACHINE

CATEGORY "Restrict USB Drives"
POLICY "Disable USB Drive"
#if version >= 3
EXPLAIN !!EXPLAIN1
#endif
KEYNAME
SYSTEM\CurrentControlSet\Services\USBSTOR
VALUENAME Start
VALUEON NUMERIC 4
VALUEOFF NUMERIC 3
END POLICY ;Disable USB Drive

END CATEGORY ;Restrict USB Drives

CLASS USER
[Strings]
EXPLAIN1 = "Policy to disable USB removable storage

 

[Derek Melber [MVP]]

That is because this is a "preference" not a "policy". Policies are located
in one of the 4 Registry paths that don't tattoo the computers. This will
tattoo the target computer. To get "preferences" to show up in the GPO
editor, do the following steps:

1) Open up the GPO in the GPO editor that you have imported the ADM into
2) Under the View menu option, deselect the "Show Policies only" option

Now, you should see your policy option under the Computer Configuration. The
policy itself should have a red dot next to it.

 

[Srikanth N [MSFT]]

Below is my idea on how to restrict USB Drives using ADM files:

CLASS MACHINE

CATEGORY !!"Restrict USB Drive"

POLICY !!"Disable USB Drives"

KEYNAME "SYSTEM\CurrentControlSet\Services\USBSTOR"

EXPLAIN !!explaintext

PART !!labeltext DROPDOWNLIST REQUIRED

VALUENAME "Start"

ITEMLIST
NAME !!Disabled VALUE NUMERIC 3 DEFAULT
NAME !!Enabled VALUE NUMERIC 4
END ITEMLIST

END PART

END POLICY

END CATEGORY


[strings]
categoryname="Restrict Drives"
policyname="Disable the USB Drive"
explaintext="Disables the computers USB Drive completely"
labeltext="Disable USB Drive"
Enabled="Enabled"
Disabled="Disabled"

Srikanth N
This posting is provided "AS IS" with no warranties, and confers no rights.