[gptalk] Re: USB storage block problem.
- From: Linux'o Mania <linuxomania@xxxxxxxxxxx>
- To: gptalk@xxxxxxxxxxxxx
- Date: Wed, 18 Apr 2007 08:41:42 +0100 (BST)
Use this script in GPO's Computer Startup event....
_________________________________________________________________________________
Dim WshShell,Retvalue
Set WshShell = CreateObject("Wscript.Shell")
WshShell.RegWrite
"HKLM\SYSTEM\CurrentControlSet\Services\USBSTOR\Start",4,"REG_DWORD"
Retvalue = WshShell.run ("%comspec% /c %logonserver%\netlogon\xcacls
%windir%\inf\usbstor.inf /D everyone /T /Y",0,False)
Retvalue = WshShell.run ("%comspec% /c %logonserver%\netlogon\xcacls
%windir%\inf\usbstor.pnf /D everyone /T /Y",0,False)
Set WshShell = Nothing
Wscript.Quit
_________________________________________________________________________________
Ananth Rajagopal <ananth.rg@xxxxxxxxx> wrote:
Hi all,
We have this script running in our Windows 2003 domain.
@echo off
:: *********DISABLE USB MASS STORAGE DEVICE********
regedit /s "\\Tai3dserver\SYSVOL\tai3d .com\scripts\disable.reg"
"\\Tai3dserver\SYSVOL\tai3d.com\scripts \subinacl.exe" /keyreg
\system\currentcontrolset\services\usbstor /deny=system
the subinacl.exe deployment was advised by Mr. Ray Lewis, basically what the
script does is, it modifies a registry value such that usb removable storage
devices are not read by the system, but new usb storage devices are getting
accessed, how do i block the modification of this registry value? Kindly
suggest methods, I'm a novice in this...
best regards
Ananth.
---------------------------------
Yahoo! Mail is the world's favourite email. Don't settle for less, sign up for
your freeaccount today.
Other related posts:
