Sign in to follow this  
Followers 0
Zafar Iqbal

How to Disable USB & CD Rom Through Group Policy

12 posts in this topic

Dear All,

 

I want to disable USB & CD Rom of client computers in Windows Server 2003 domain environment through group policy. Could anyone guide me in this regard. Clients are Windows XP with SP2 & SP3.

 

Zafar Iqbal

0

Share this post


Link to post
Share on other sites
Zafar Iqbal: google first, and take out sometime to read FAQ.

 

anyways, here's the link.

 

 

Dear bluefin,

 

I have already checked the tried the link but not working for me. And I also tried to find in Yahoo & Google but all in vain. I am seeking help if anyone has impleted this group policy.

 

Regards,

 

Zafar Iqbal

0

Share this post


Link to post
Share on other sites

Hey there;

 

Try the following link, I have this policy enabled for my domain and it is working fine.

 

hxxp://www.petri.co.il/disable_usb_disks_with_gpo.htm

 

and the following link for more info:

 

hxxp://windowsdevcenter.com/pub/a/windows/2005/11/15/disabling-usb-storage-with-group-policy.html

hxxp://support.microsoft.com/kb/555324

hxxp://www.experts-exchange.com/Software/Server_Software/File_Servers/Active_Directory/Q_23576870.html

 

Regards.

0

Share this post


Link to post
Share on other sites

Hi Man, i've done this before...you have to use a custom template in group policy, but it's been quite a while. Try google (Disabling usb and cd through custom gpo)

 

u should get somthing

0

Share this post


Link to post
Share on other sites

Here's nice *.adm template for that purpose:

http://support.microsoft.com/kb/555324

0

Share this post


Link to post
Share on other sites

now i can c a CUSTOM GROUP POLICY UNDER COMPUTER CONFIGURATION NODE IN GPO.

I TRIED BOTH OPTIONS DISABLE CD & DISABLE USB (I SELECT ENABLED THEN DISABLEED) ALSO CHECKED AFTER RELOGIN AT CLIENT COMPUTERS BUT ITS NOT EFFECTIVE

0

Share this post


Link to post
Share on other sites

Disable USB from the BIOS. Unplug the Optical Drive PATA Cable from the drive. Lock the Cabinet.

 

Problem Solved.

 

If not disable all the drivers related to the devices with the administrator account - Normal users cannot enable them back.

0

Share this post


Link to post
Share on other sites

I have tried using the registry hacks pointed by petri and others on the net

which is to set the regisry value of

local machine\system\curent controlset\USBSTOR

start = 4

 

but the results are starnge e.g. i have three usb drives named "A","B" and "C"

 

I inserted Usb Drive "A", it got installed I went to registry and changed the vlaue of START to 4

took out the USB "A" and inserted it back the windows did not install it

 

Inserted USB "B" it got installed and the value of parameter start is changed from 4 to 3

changed the start value back to 4 and tried USB "B" again windows did not install it.

 

Inserted USB "C" the same process again the start got changed to 3 and the drive gets installed

 

its like windows save a record of the device by the manufacturer or some other ID and disable it for this device only

 

OR may be i'm missing some thing here

 

can anyone please help!!!

0

Share this post


Link to post
Share on other sites
I have tried using the registry hacks pointed by petri and others on the net

which is to set the regisry value of

local machine\system\curent controlset\USBSTOR

start = 4

 

but the results are starnge e.g. i have three usb drives named "A","B" and "C"

 

I inserted Usb Drive "A", it got installed I went to registry and changed the vlaue of START to 4

took out the USB "A" and inserted it back the windows did not install it

 

Inserted USB "B" it got installed and the value of parameter start is changed from 4 to 3

changed the start value back to 4 and tried USB "B" again windows did not install it.

 

Inserted USB "C" the same process again the start got changed to 3 and the drive gets installed

 

its like windows save a record of the device by the manufacturer or some other ID and disable it for this device only

 

OR may be i'm missing some thing here

 

can anyone please help!!!

 

Please use IntelliAdmin Network Administrator software. It is very easy to use and you can control USB Devices on each client computer except USB Keyboard and Mouse.

 

Zafar

0

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now
Sign in to follow this  
Followers 0