[gptalk] Re: how to block removable USB storage devices

  • From: "Delaney, Doug" <doug.delaney@xxxxxxx>
  • To: <gptalk@xxxxxxxxxxxxx>
  • Date: Tue, 17 Oct 2006 11:03:18 -0400

You can try this...
 

1.      Open Registry Editor. 

2.      In Registry Editor, navigate to the following registry key:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\StorageDevicePolicies

        Note: This key might not exist. In that case simply create it as
a new key under the parent key.

3.      Create the following value (DWORD): 

        WriteProtect

        and give it a value of 1.

I would also be possible to create your own adm template, to apply this
via GPO... see: http://support.microsoft.com/kb/323639 (and do not
duplicate anything already in an existing template, except the section
names of the ADM template, and try to think in reverse - i.e. enable a
policy to turn it off, disable to turn it on, etc.)

Doug Delaney
GM Desktop Engineering
Global Client Engineering GM
1075 W. Entrance Dr., MS 2B, Cube 2130
Auburn Hills, MI 48326
Lab: 248-365-9187
Tel: 248-754-7917
Pg: 248-870-0306 pager
Mail: Doug.Delaney@xxxxxxx <mailto:Doug.Delaney@xxxxxxx>  

Note: The information in this email is intended solely for the
addressee. Access to this email by anyone else is unauthorized. If you
are not the intended recipient, any disclosure, copying, distribution or
any action taken or omitted to be taken in reliance on it is prohibited.

 


________________________________

        From: gptalk-bounce@xxxxxxxxxxxxx
[mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Ananth Rajagopal
        Sent: Tuesday, October 17, 2006 6:58 AM
        To: gptalk@xxxxxxxxxxxxx
        Subject: [gptalk] how to block removable USB storage devices
        
        
        Hi,
        
        This is my first query, won't be the last for sure...
        
        I'm working in an Animation studio, we have a policy here of
blocking all USB drives, along with FDD and CDD.
        
        But we are getting some Pen Tablets, and all are USB devices, so
obviously we will need to allow enable USB ports, is there any way to
block users from connecting their removable drives and copying data
using Group Policies? 
        
        Kindly advice..in detail :-)
        
        regards
        anth 

Other related posts: