Announcement

Collapse
No announcement yet.

Restrict USB by GPO

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Restrict USB by GPO

    Hi,

    I am new here but I have been reading long time. My ICT head advice me deploy ads(windows 2003 R2, S2). I installed it but fail to restrict usd device(pen drive). I read some article from this froum and deploy it but it's not working. I import adm file and stoped usb and cd rom. It's not working really !!!!!!!!!!!!. Pls help me.

  • #2
    Re: Restrict USB by GPO

    Hi,

    What is client OS and what setting have you used?

    Why you just don't disable it from bios if it's company's system
    Thanks & Regards
    v-2nas

    MCTS 2008, MCTIP, MCSE 2003, MCSA+Messaging E2K3, MCP, E2K7
    Sr. Wintel Eng. (Investment Bank)
    Independent IT Consultant and Architect
    Blog: http://www.exchadtech.blogspot.com

    Show your appreciation for my help by giving reputation points

    Comment


    • #3
      Re: Restrict USB by GPO

      :sigh:

      Seeing as Santa didn't bring me, or any other forum member, the gift of telepathy, you'll have to help us first by giving us some information.

      Which article did you use? What client OS are you restricting on? Is the GPO applying to the appropriate PCs? What is the result of RSOP or Group Policy modelling?
      BSc, MCSA: Server 2008, MCSE, MCSA: Messaging, MCTS
      sigpic
      Cruachan's Blog

      Comment


      • #4
        Re: Restrict USB by GPO

        Can the OP confirm the GPO is working in that both USB sticks and CD-ROM are restricted (thats how I read post #1)?

        Is this a USB CD-ROM or a sata/pata one?
        Tom Jones
        MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
        PhD, MSc, FIAP, MIITT
        IT Trainer / Consultant
        Ossian Ltd
        Scotland

        ** Remember to give credit where credit is due and leave reputation points where appropriate **

        Comment


        • #5
          Re: Restrict USB by GPO

          First of all, Happy New Year 2011.

          Secondly, Server OS is windows 2003, R2, Enterprise and client windows XP (sp2, sp3). We have 1300 client PC. Currently we are using sophos antivirus for protecting USB and CD ROM. But my management want to deploy active directory system(ADS) for restrict USB and CD ROM and other purpose for controlling user.

          I used RSOP but didn't get any error. Other policies like desktop protection, disable add/remove program, remove my computer etc are working fine. For protecting USB and CD ROM I used the following step:

          Step-1: I download adm file and added it through GPO.

          Step-2: I stopped USB and CDROM from GPO(Edit gpo- Computer Configuration-Administrative Templates-restrict device)

          Step-3: usbstor.sys stoped

          But I could not remove SYSTEM access permissions from the usbstor.sys and usbstor.inf files.

          I also saw some article from petri inthis issue.
          Please guide me step by step in this regards. It’s a great forum with great ICT personnel. I expecting some out come from them.

          If you get anything wrong, Please correct me.
          Last edited by era7bd; 1st January 2011, 07:39.

          Comment


          • #6
            Re: Restrict USB by GPO

            I haven't been asleep all this year so the brain that sometimes works is horizontally fertilised at the moment. So, what is ADS? http://www.google.com.au/search?hl=e...l=&oq=&gs_rfai=
            1 1 was a racehorse.
            2 2 was 1 2.
            1 1 1 1 race 1 day,
            2 2 1 1 2

            Comment


            • #7
              Re: Restrict USB by GPO

              Active Directory Service(ADS).

              Comment


              • #8
                Re: Restrict USB by GPO

                I'm moving this thread to the GPO forum for better response.
                Tom Jones
                MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
                PhD, MSc, FIAP, MIITT
                IT Trainer / Consultant
                Ossian Ltd
                Scotland

                ** Remember to give credit where credit is due and leave reputation points where appropriate **

                Comment


                • #9
                  Re: Restrict USB by GPO

                  Anybody who successfully restricted USB in client PC through GPO, Please come to the thread

                  Comment


                  • #10
                    Re: Restrict USB by GPO

                    Hi,

                    have you tried this one

                    HOWTO: Use Group Policy to disable USB, CD-ROM, Floppy Disk and LS-120 drivers
                    http://support.microsoft.com/kb/555324
                    Thanks & Regards
                    v-2nas

                    MCTS 2008, MCTIP, MCSE 2003, MCSA+Messaging E2K3, MCP, E2K7
                    Sr. Wintel Eng. (Investment Bank)
                    Independent IT Consultant and Architect
                    Blog: http://www.exchadtech.blogspot.com

                    Show your appreciation for my help by giving reputation points

                    Comment


                    • #11
                      Re: Restrict USB by GPO

                      Hi,

                      I have solved this problem. But when I put new usb device then it's dected. Second time it's refused. How can protect first time access?

                      Comment


                      • #12
                        Re: Restrict USB by GPO

                        http://www.petri.com/disable_usb_disks_with_gpo.htm
                        http://www.petri.com/disable_usb_disks.htm
                        ** Remember to give credit where credit is due and leave reputation points where appropriate **

                        Comment


                        • #13
                          Re: Restrict USB by GPO

                          Thax............

                          Comment

                          Working...
                          X