Disabling USB ports and external disk drives

  • Thread starter Thread starter VEZF
  • Start date Start date
V

VEZF

Hello, everyone.

Does anybody know how can I disable USB ports and external
disk drives with Active Directory policies?

Thanks for your help.
 
VEZF said:
Hello, everyone.

Does anybody know how can I disable USB ports and external
disk drives with Active Directory policies?

Thanks for your help.
Click to expand...

According to this page:

http://www.experts-exchange.com/Networking/Q_20571610.html

there's no group policy available to disable USB, but there is a VBScript
Here:

http://www.heise.de/ct/ftp/result.xhtml?url=/ct/ftp/03/08/190/default.shtml&words=USB

that provides a workaround.

Also, there's:

http://www.protect-me.com/usb_storage_devices_risks.html

which has a clever suggestion, simply moving the DRIVER.CAB file to a
location that only Admins can access. Of course, this doesn't help if they
bring in their own drivers.

And then another idea at:

http://www.mail-archive.com/[email protected]/msg11158.html

"What you want to do is to create a group policy that will only allow
perhaps system or domain admin rights to the following key(s)
HKLM\System\CurrentControlSet\Service\USBhub
HKLM\System\CurrentControlSet\Service\USBuhci make sure you make the
entry start to 0
HKML\System\CurrentControlSet\Service\usbstor"

--

Mike Brown
Asset Forwarding Corp.
EPA-compliant Electronics Recycling
DoD 5220.22-M Data Elimination
http://www.assetforwarding.com
 
Thank you, Mike.

I'll try.
-----Original Message-----


According to this page:

http://www.experts-exchange.com/Networking/Q_20571610.html

there's no group policy available to disable USB, but there is a VBScript
Here:

http://www.heise.de/ct/ftp/result.xhtml? url=/ct/ftp/03/08/190/default.shtml&words=USB

that provides a workaround.

Also, there's:

http://www.protect-me.com/usb_storage_devices_risks.html

which has a clever suggestion, simply moving the DRIVER.CAB file to a
location that only Admins can access. Of course, this doesn't help if they
bring in their own drivers.

And then another idea at:

http://www.mail- archive.com/[email protected]/msg11158.html

"What you want to do is to create a group policy that will only allow
perhaps system or domain admin rights to the following key (s)
HKLM\System\CurrentControlSet\Service\USBhub
HKLM\System\CurrentControlSet\Service\USBuhci make sure you make the
entry start to 0
HKML\System\CurrentControlSet\Service\usbstor"

--

Mike Brown
Asset Forwarding Corp.
EPA-compliant Electronics Recycling
DoD 5220.22-M Data Elimination
http://www.assetforwarding.com


.
Click to expand...
 
Back
Top