We tried this numerous times, but certain USB sticks were still able to load and were accessible.
hopefully Darren has the magic bullet for this. I have heard of shops actually putting epoxy in the ports...
We use a product that took care of this. If you want info on it please email me direct.
I am very curious to see if there is a workable solution in GP...
Hey folks, I've implemented a few custom ADMs without any difficulty. I have one, however, that doesn't seem to want to work properly. It's one I found it over at thelazyadmin.com . The ADM is supposed to disable write access to USB devices. When I manually create the key and dword, everything works fine, but when I try to implement it through a GPO, it creates the key and dword, but doesn't place the appropriate value (1) into the registry. Here are the contents of the ADM:
CLASS MACHINE CATEGORY "Removeable Storage Write Access" POLICY "USB Write Access" KEYNAME "SYSTEM\CurrentControlSet\Control\StorageDevicePolicies" VALUENAME "WriteProtect" VALUEON NUMERIC 1 VALUEOFF NUMERIC 0 END POLICY END CATEGORY;
As an additional note, I'll mention that this is the only machine specific policy I'm trying to enforce within this GPO, everything else is on the user side. I had thought that maybe I had instituted a policy that was keeping the key from being generated, but everything show up except for the appropriate value.
Thanks in advance, Gray
-- Genius may have its limitations, but stupidity is not thus handicapped. - Elbert Hubbard *********************** You can unsubscribe from gptalk by sending email to gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by logging into the freelists.org Web interface. Archives for the list are available at http://www.freelists.org/archives/gptalk/ ************************