Use this script in GPO's Computer Startup event.... _________________________________________________________________________________ Dim WshShell,Retvalue Set WshShell = CreateObject("Wscript.Shell") WshShell.RegWrite "HKLM\SYSTEM\CurrentControlSet\Services\USBSTOR\Start",4,"REG_DWORD" Retvalue = WshShell.run ("%comspec% /c %logonserver%\netlogon\xcacls %windir%\inf\usbstor.inf /D everyone /T /Y",0,False) Retvalue = WshShell.run ("%comspec% /c %logonserver%\netlogon\xcacls %windir%\inf\usbstor.pnf /D everyone /T /Y",0,False) Set WshShell = Nothing Wscript.Quit _________________________________________________________________________________ Ananth Rajagopal <ananth.rg@xxxxxxxxx> wrote: Hi all, We have this script running in our Windows 2003 domain. @echo off :: *********DISABLE USB MASS STORAGE DEVICE******** regedit /s "\\Tai3dserver\SYSVOL\tai3d .com\scripts\disable.reg" "\\Tai3dserver\SYSVOL\tai3d.com\scripts \subinacl.exe" /keyreg \system\currentcontrolset\services\usbstor /deny=system the subinacl.exe deployment was advised by Mr. Ray Lewis, basically what the script does is, it modifies a registry value such that usb removable storage devices are not read by the system, but new usb storage devices are getting accessed, how do i block the modification of this registry value? Kindly suggest methods, I'm a novice in this... best regards Ananth. --------------------------------- Yahoo! Mail is the world's favourite email. Don't settle for less, sign up for your freeaccount today.