Use this script in GPO's Computer Startup event....
_________________________________________________________________________________
Dim WshShell,Retvalue
Set WshShell = CreateObject("Wscript.Shell")
WshShell.RegWrite"HKLM\SYSTEM\CurrentControlSet\Services\USBSTOR\Start",4,"REG_DWORD"
Retvalue = WshShell.run ("%comspec% /c %logonserver%\netlogon\xcacls
%windir%\inf\usbstor.inf /D everyone /T /Y",0,False)
Retvalue = WshShell.run ("%comspec% /c %logonserver%\netlogon\xcacls
%windir%\inf\usbstor.pnf /D everyone /T /Y",0,False)
Set WshShell = Nothing
Wscript.Quit
_________________________________________________________________________________
**
*Ananth Rajagopal <ananth.rg@xxxxxxxxx>* wrote:
Hi all,
We have this script running in our Windows 2003 domain.
@echo off
:: *********DISABLE USB MASS STORAGE DEVICE********
regedit /s "\\Tai3dserver\SYSVOL\tai3d .com\scripts\disable.reg"
"\\Tai3dserver\SYSVOL\tai3d.com\scripts **\subinacl.exe" /keyreg
\system\currentcontrolset\services\usbstor /deny=system
the subinacl.exe deployment was advised by Mr. Ray Lewis, basically what
the script does is, it modifies a registry value such that usb removable
storage devices are not read by the system, but new usb storage devices are
getting accessed, how do i block the modification of this registry value?
Kindly suggest methods, I'm a novice in this...
best regards
Ananth.
------------------------------
Yahoo! Mail is the world's favourite email. Don't settle for less, sign up
for your free account
today<http://uk.rd.yahoo.com/evt=44106/*http://uk.docs.yahoo.com/mail/winter07.html>
.
