Hi All, We have a script which changes the USB stor value to 4 and blocks USB devices, but problem is every new script get accepted. So as per suggestion we set a new policy where users doesn't has only deny permissions to usbstor.inf and usbstor.pnf files. Now usb storage devices are blocked across the domain, BUT But problem is that even administrators can't use new usb sticks now... Domain administrators are give full rights to these two files and the usbstor registry key is set to 3 (enable) for their systems, but stil!!!!! please advice!!! any clues.... regards Ananth.