Jump to content


How to Disable USB & CD Rom Through Group Policy


  • Please log in to reply
11 replies to this topic

#1 Zafar Iqbal

Zafar Iqbal

    Newbie

  • Members
  • Pip
  • 41 posts

Posted 04 November 2008 - 03:30 PM

Dear All,

I want to disable USB & CD Rom of client computers in Windows Server 2003 domain environment through group policy. Could anyone guide me in this regard. Clients are Windows XP with SP2 & SP3.

Zafar Iqbal
  • 0

#2 bluefin

bluefin

    V.I.P. Member

  • Members
  • PipPipPipPipPip
  • 1577 posts
  • Gender:Male

Posted 04 November 2008 - 04:13 PM

Zafar Iqbal: google first, and take out sometime to read FAQ.

anyways, here's the link.

http://support.microsoft.com/kb/555324


Edited by bluefin, 04 November 2008 - 04:17 PM.

  • 0

#3 Zafar Iqbal

Zafar Iqbal

    Newbie

  • Members
  • Pip
  • 41 posts

Posted 04 November 2008 - 05:44 PM

Zafar Iqbal: google first, and take out sometime to read FAQ.

anyways, here's the link.

http://support.microsoft.com/kb/555324


Dear bluefin,

I have already checked the tried the link but not working for me. And I also tried to find in Yahoo & Google but all in vain. I am seeking help if anyone has impleted this group policy.

Regards,

Zafar Iqbal
  • 0

#4 kinan

kinan

    MCSE Expert

  • Members
  • PipPipPipPipPip
  • 1038 posts
  • Gender:Male
  • Location:In the middle of no where...
  • Interests:Computers/Certificates/Poetry/Painting/Playing Guitar & Basketball/ Dancing Ballroom & Latino.

Posted 04 November 2008 - 08:46 PM

Hey there;

Try the following link, I have this policy enabled for my domain and it is working fine.

hxxp://www.petri.co.il/disable_usb_disks_with_gpo.htm

and the following link for more info:

hxxp://windowsdevcenter.com/pub/a/windows/2005/11/15/disabling-usb-storage-with-group-policy.html
hxxp://support.microsoft.com/kb/555324
hxxp://www.experts-exchange.com/Software/Server_Software/File_Servers/Active_Directory/Q_23576870.html

Regards.
  • 0

#5 topsy53

topsy53

    Member

  • Members
  • PipPip
  • 114 posts
  • Gender:Male

Posted 04 November 2008 - 08:53 PM

Hi Man, i've done this before...you have to use a custom template in group policy, but it's been quite a while. Try google (Disabling usb and cd through custom gpo)

u should get somthing
  • 0

#6 sudheshpn

sudheshpn

    Advanced Member

  • Members
  • PipPipPip
  • 437 posts
  • Gender:Male
  • Location:India,Bangalore
  • Interests:making friend,hacking,chatting,reading ebooks......

Posted 04 November 2008 - 09:21 PM

http://www.intelliad...s-remotely.html

check this tool
  • 0

#7 hot_sissy

hot_sissy

    Member

  • Members
  • PipPip
  • 58 posts

Posted 31 December 2008 - 07:47 PM

thank you for help
what i missed was VIEW-->Filter-->UN CHECK.......

thanks
  • 0

#8 OTO_777

OTO_777

    Super Member

  • Members
  • PipPipPipPip
  • 680 posts
  • Gender:Male
  • Location:Georgia,Tbilisi
  • Interests:Computers, Hardware, Systems, Networking, Softwares,
    Programming, Windows, MCP, MCSA, MCSE, Comptia A+, Network +, Security +, Linux, Linux +, Apple, Cisco, CCNA, CCNP, CCIE, Telecommunications, Servers,P2P Network, Cars (Only BMW), Dogs, Beer, Wine, History, Geography, Literature, Girls, Sex, Music, Russian Rock(Melody), Electronic Music (Trance), Movies (Documentaries), F*ck Minimal, Lost, Prison Break, Tennis, Football, Manchester United, Basketball, Detroit Pistons, England, London, Rugby, Georgia.

Posted 08 January 2009 - 08:13 PM

Here's nice *.adm template for that purpose:
http://support.microsoft.com/kb/555324

  • 0

#9 hot_sissy

hot_sissy

    Member

  • Members
  • PipPip
  • 58 posts

Posted 14 January 2009 - 02:22 PM

now i can c a CUSTOM GROUP POLICY UNDER COMPUTER CONFIGURATION NODE IN GPO.
I TRIED BOTH OPTIONS DISABLE CD & DISABLE USB (I SELECT ENABLED THEN DISABLEED) ALSO CHECKED AFTER RELOGIN AT CLIENT COMPUTERS BUT ITS NOT EFFECTIVE
  • 0

#10 Be Quick Or Be Dead!

Be Quick Or Be Dead!

    Retired and Rusted

  • Validating
  • PipPipPipPipPip
  • 1529 posts
  • Gender:Male

Posted 14 January 2009 - 02:35 PM

Disable USB from the BIOS. Unplug the Optical Drive PATA Cable from the drive. Lock the Cabinet.

Problem Solved.

If not disable all the drivers related to the devices with the administrator account - Normal users cannot enable them back.
  • 0

#11 ccie2k7

ccie2k7

    Newbie

  • Members
  • Pip
  • 20 posts

Posted 10 March 2009 - 12:24 AM

I have tried using the registry hacks pointed by petri and others on the net
which is to set the regisry value of
local machine\system\curent controlset\USBSTOR
start = 4

but the results are starnge e.g. i have three usb drives named "A","B" and "C"

I inserted Usb Drive "A", it got installed I went to registry and changed the vlaue of START to 4
took out the USB "A" and inserted it back the windows did not install it

Inserted USB "B" it got installed and the value of parameter start is changed from 4 to 3
changed the start value back to 4 and tried USB "B" again windows did not install it.

Inserted USB "C" the same process again the start got changed to 3 and the drive gets installed

its like windows save a record of the device by the manufacturer or some other ID and disable it for this device only

OR may be i'm missing some thing here

can anyone please help!!!
  • 0

#12 Zafar Iqbal

Zafar Iqbal

    Newbie

  • Members
  • Pip
  • 41 posts

Posted 11 March 2009 - 08:38 PM

I have tried using the registry hacks pointed by petri and others on the net
which is to set the regisry value of
local machine\system\curent controlset\USBSTOR
start = 4

but the results are starnge e.g. i have three usb drives named "A","B" and "C"

I inserted Usb Drive "A", it got installed I went to registry and changed the vlaue of START to 4
took out the USB "A" and inserted it back the windows did not install it

Inserted USB "B" it got installed and the value of parameter start is changed from 4 to 3
changed the start value back to 4 and tried USB "B" again windows did not install it.

Inserted USB "C" the same process again the start got changed to 3 and the drive gets installed

its like windows save a record of the device by the manufacturer or some other ID and disable it for this device only

OR may be i'm missing some thing here

can anyone please help!!!


Please use IntelliAdmin Network Administrator software. It is very easy to use and you can control USB Devices on each client computer except USB Keyboard and Mouse.

Zafar
  • 0





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users