[gptalk] Re: ADM problem

The thing is that if I create the key/dword and put in the value 1 in
manually, it works fine, write access to USB devices is disallowed.  If I
use the ADM, though, it creates the key and dword, but doesn't put the
correct value in, it stays 0.



On 8/22/06, Tim Bolton <jsclmedave@xxxxxxxxx> wrote: 

We tried this numerous times, but certain USB sticks were still able
to load and were accessible.

hopefully Darren has the magic bullet for this.  I have heard of shops
actually putting epoxy in the ports...

We use a product that took care of this.  If you want info on it
please email me direct.

I am very curious to see if there is a workable solution in GP...

TB

On 8/22/06, Gray Troutman <jgraytroutman@xxxxxxxxx> wrote:
> Hey folks,
> I've implemented a few custom ADMs without any difficulty.  I have one,
> however, that doesn't seem to want to work properly.  It's one I found
it
> over at thelazyadmin.com .  The ADM is supposed to disable write access
to
> USB devices.  When I manually create the key and dword, everything works
> fine, but when I try to implement it through a GPO, it creates the key
and
> dword, but doesn't place the appropriate value (1) into the
registry.  Here
> are the contents of the ADM:
>
> CLASS MACHINE
> CATEGORY "Removeable Storage Write Access"
>  POLICY "USB Write Access"
>   KEYNAME
> "SYSTEM\CurrentControlSet\Control\StorageDevicePolicies"
>    VALUENAME "WriteProtect"
>    VALUEON NUMERIC 1
>    VALUEOFF NUMERIC 0
>  END POLICY
> END CATEGORY;
>
> As an additional note, I'll mention that this is the only machine
specific
> policy I'm trying to enforce within this GPO, everything else is on the
user
> side.  I had thought that maybe I had instituted a policy that was
keeping
> the key from being generated, but everything show up except for the
> appropriate value.
>
> Thanks in advance,
> Gray
>


--
Genius may have its limitations, but stupidity is not thus
handicapped. - Elbert Hubbard
***********************
You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
logging into the freelists.org Web interface. Archives for the list are
available at http://www.freelists.org/archives/gptalk/
************************

Other related posts: