How to disable USB Pendrive /USB Storage Device using Server Group Policy
How to disable USB Pendrive /USB Storage Device using Server Group Policy?
Ans:
follow the 4 steps below.
1.) Take the following text, copy it, and paste it into a text
document. Then, save it as USBSTOR.ADM.
CLASS MACHINE
CATEGORY "Custom Policies"
KEYNAME "SYSTEM\CurrentControlSet\Services\UsbStor"
POLICY "USB Mass Storage Installation"
EXPLAIN "When this policy is enabled, USB mass storage device
permissions can be changed by using the drop down box.
Selecting 'Grant Permission' will allow USB mass storage devices to be
installed. Selecting 'Deny Permission' will prohibit
the installation of USB mass storage devices.
IF REMOVING THIS POLICY: Reset to original setting and let policy
propegate before deleting policy."
PART "Change Settings:" DROPDOWNLIST REQUIRED
VALUENAME "Start"
ITEMLIST
NAME "Grant Permission" VALUE NUMERIC 3 DEFAULT
NAME "Deny Permission" VALUE NUMERIC 4
END ITEMLIST
END PART
END POLICY
END CATEGORY
2.) Open a group policy management console (gpedit.msc), and right
click on "administrative templates" under "Computer Configuration".
Select "Add/Remove Templates".
3.) Browse to the text document you just saved and click OK. You'll
now see "Custom Policies" under "Administrative Templates". Right
click on it, select "View", then select "Filtering". Uncheck the
bottom box, labeled "Only show policy settings that can be fully
managed".
4.) Click ok. Now you'll see the USB policy available for use under
the custom policy heading. From there, you can enable or disable it
just like any other policy.
Ans:
follow the 4 steps below.
1.) Take the following text, copy it, and paste it into a text
document. Then, save it as USBSTOR.ADM.
CLASS MACHINE
CATEGORY "Custom Policies"
KEYNAME "SYSTEM\CurrentControlSet\Services\UsbStor"
POLICY "USB Mass Storage Installation"
EXPLAIN "When this policy is enabled, USB mass storage device
permissions can be changed by using the drop down box.
Selecting 'Grant Permission' will allow USB mass storage devices to be
installed. Selecting 'Deny Permission' will prohibit
the installation of USB mass storage devices.
IF REMOVING THIS POLICY: Reset to original setting and let policy
propegate before deleting policy."
PART "Change Settings:" DROPDOWNLIST REQUIRED
VALUENAME "Start"
ITEMLIST
NAME "Grant Permission" VALUE NUMERIC 3 DEFAULT
NAME "Deny Permission" VALUE NUMERIC 4
END ITEMLIST
END PART
END POLICY
END CATEGORY
2.) Open a group policy management console (gpedit.msc), and right
click on "administrative templates" under "Computer Configuration".
Select "Add/Remove Templates".
3.) Browse to the text document you just saved and click OK. You'll
now see "Custom Policies" under "Administrative Templates". Right
click on it, select "View", then select "Filtering". Uncheck the
bottom box, labeled "Only show policy settings that can be fully
managed".
4.) Click ok. Now you'll see the USB policy available for use under
the custom policy heading. From there, you can enable or disable it
just like any other policy.
Comments