[gptalk] Re: USB storage block problem.

  • From: Linux'o Mania <linuxomania@xxxxxxxxxxx>
  • To: gptalk@xxxxxxxxxxxxx
  • Date: Wed, 18 Apr 2007 08:41:42 +0100 (BST)

Use this script in GPO's Computer Startup event....
  Dim WshShell,Retvalue
Set WshShell = CreateObject("Wscript.Shell")
  Retvalue = WshShell.run ("%comspec% /c  %logonserver%\netlogon\xcacls 
%windir%\inf\usbstor.inf /D everyone /T /Y",0,False)
  Retvalue = WshShell.run ("%comspec% /c  %logonserver%\netlogon\xcacls 
%windir%\inf\usbstor.pnf /D everyone /T /Y",0,False)
Set WshShell = Nothing

  Ananth Rajagopal <ananth.rg@xxxxxxxxx> wrote:
  Hi all,

We have this script running in our Windows 2003 domain. 

@echo off


regedit /s "\\Tai3dserver\SYSVOL\tai3d .com\scripts\disable.reg"

"\\Tai3dserver\SYSVOL\tai3d.com\scripts \subinacl.exe" /keyreg 
\system\currentcontrolset\services\usbstor /deny=system

the subinacl.exe deployment was advised by Mr. Ray Lewis, basically what the 
script does is, it modifies a registry value such that usb removable storage 
devices are not read by the system, but new usb storage devices are getting 
accessed, how do i block the modification of this registry value? Kindly 
suggest methods, I'm a novice in this... 

best regards

 Yahoo! Mail is the world's favourite email. Don't settle for less, sign up for 
your freeaccount today.

Other related posts: