Thanks Darren, I'm reading this right now. Thank you for the link. ~Ben From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Darren Mar-Elia Sent: Tuesday, July 08, 2008 10:28 AM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Re: Prevent access to USB disks and portable media drives Yes, but perfectly accessible from those lower-level platforms. Check this out: http://sdmsoftware.com/blog/2008/03/managing_group_policy_preferen.html From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of WATSON, BEN Sent: Tuesday, July 08, 2008 10:23 AM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Re: Prevent access to USB disks and portable media drives Hi Darren, Are group policy preferences something new provided by Windows Server 2008? I'm not familiar with them, or I've been completely ignorant of them in Windows Server 2003 unfortunately. This is indeed a Windows Server 2003 R2 domain with Windows XP clients. ~Ben From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Darren Mar-Elia Sent: Tuesday, July 08, 2008 10:22 AM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Re: Prevent access to USB disks and portable media drives Ben- Assuming these are not Vista-based systems (Vista provides this kind of restriction capability out of the box in GP) then you can use GP Preferences to restrict access to storage devices like these. Darren From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of WATSON, BEN Sent: Tuesday, July 08, 2008 10:17 AM To: undisclosed-recipients: Subject: [gptalk] Prevent access to USB disks and portable media drives I have a requirement by a customer to prevent users from being able to use USB disks on their workstations as well as preventing access to any floppy drives, CD/DVD drives, etc. However, there will be a couple privileged users who will need to retain access to these devices. I found a great article with a pre-built ADM template, however it is a computer based policy, and I require a user based policy. Is anyone aware of a way to accomplish these using user-based policies? Thanks, ~Ben