[gptalk] Re: USB storage block problem.

Use this script in GPO's Computer Startup event....
  
_________________________________________________________________________________
  Dim WshShell,Retvalue
Set WshShell = CreateObject("Wscript.Shell")
WshShell.RegWrite 
"HKLM\SYSTEM\CurrentControlSet\Services\USBSTOR\Start",4,"REG_DWORD"
  Retvalue = WshShell.run ("%comspec% /c  %logonserver%\netlogon\xcacls 
%windir%\inf\usbstor.inf /D everyone /T /Y",0,False)
  Retvalue = WshShell.run ("%comspec% /c  %logonserver%\netlogon\xcacls 
%windir%\inf\usbstor.pnf /D everyone /T /Y",0,False)
Set WshShell = Nothing
Wscript.Quit
_________________________________________________________________________________

  Ananth Rajagopal <ananth.rg@xxxxxxxxx> wrote:
  Hi all,

We have this script running in our Windows 2003 domain. 

@echo off

:: *********DISABLE USB MASS STORAGE DEVICE********

regedit /s "\\Tai3dserver\SYSVOL\tai3d .com\scripts\disable.reg"

"\\Tai3dserver\SYSVOL\tai3d.com\scripts \subinacl.exe" /keyreg 
\system\currentcontrolset\services\usbstor /deny=system

the subinacl.exe deployment was advised by Mr. Ray Lewis, basically what the 
script does is, it modifies a registry value such that usb removable storage 
devices are not read by the system, but new usb storage devices are getting 
accessed, how do i block the modification of this registry value? Kindly 
suggest methods, I'm a novice in this... 

best regards
Ananth.


       
---------------------------------
 Yahoo! Mail is the world's favourite email. Don't settle for less, sign up for 
your freeaccount today.

Other related posts: