Disabeling USB ports using GPO

[Greenman]

Hi,

Is it possible to Disable PC's USB Ports using a GPO (I am
running W2K AD)?

Many thanks

G

 

[Alan Sterling [MSFT]]

Turning the USB ports off and on are done by the Bios. We do not have a
policy to do that.
What is your goal?

Thanks

 

[David Lampron]

You can call devcon.exe from the logon script 'GPO' and disable the
USB port. !!! Don't forget to activate the usb port with the logoff script.

Get devcon.exe & m$ doc at :
http://support.microsoft.com/support/kb/articles/q311/2/72.asp
Some examples :
http://www.osr.com/ddk/ddtools/devcon_86er.htm

Example :
LOGON => devcon /r disable USB*
LOGOFF => devcon /r enable USB*


!!! If the user have admin rights he can go to the device manager applet
and rescan/enable the usb device : ( .