Guest M H Affendi Posted December 13, 2007 Posted December 13, 2007 I am running AD on Windows Server 2003. My company is planning to apply a security policy to block users from copying out data from their PC to their USB flash drive/external drive. The policy is supposedly to block only the USB flash drive/external drive and not the USB mouse/keyboard. Do anybody know how to do this using Group Policy Object or can anybody direct me to the appropriate website? For your info, the client PC is running on Win XP and 2000 Pro. Thanks.
Guest Jabez Gan [MVP] Posted December 13, 2007 Posted December 13, 2007 Re: How To Disable USB Removable Disk Using GPO? Hi, Have you gone through this link: http://www.petri.co.il/disable_usb_disks_with_gpo.htm ? -- Jabez Gan Microsoft MVP: Windows Server - File Storage "M H Affendi" <MHAffendi@discussions.microsoft.com> wrote in message news:B9C908AC-F227-4D01-B0EC-5BBEF9A72736@microsoft.com... >I am running AD on Windows Server 2003. My company is planning to apply a > security policy to block users from copying out data from their PC to > their > USB flash drive/external drive. The policy is supposedly to block only the > USB flash drive/external drive and not the USB mouse/keyboard. Do anybody > know how to do this using Group Policy Object or can anybody direct me to > the > appropriate website? For your info, the client PC is running on Win XP and > 2000 Pro. Thanks.
Guest M H Affendi Posted December 14, 2007 Posted December 14, 2007 Re: How To Disable USB Removable Disk Using GPO? Hi, I have found the website that you have provided me. I will test it out and update back if I encounter any problems. Thanks again for the url. "Jabez Gan [MVP]" wrote: > Hi, > > Have you gone through this link: > > http://www.petri.co.il/disable_usb_disks_with_gpo.htm ? > > -- > Jabez Gan > Microsoft MVP: Windows Server - File Storage > "M H Affendi" <MHAffendi@discussions.microsoft.com> wrote in message > news:B9C908AC-F227-4D01-B0EC-5BBEF9A72736@microsoft.com... > >I am running AD on Windows Server 2003. My company is planning to apply a > > security policy to block users from copying out data from their PC to > > their > > USB flash drive/external drive. The policy is supposedly to block only the > > USB flash drive/external drive and not the USB mouse/keyboard. Do anybody > > know how to do this using Group Policy Object or can anybody direct me to > > the > > appropriate website? For your info, the client PC is running on Win XP and > > 2000 Pro. Thanks. >
Guest M H Affendi Posted December 18, 2007 Posted December 18, 2007 Re: How To Disable USB Removable Disk Using GPO? Dear Jabez, I have tried as per article but it does not seems to work. I have created new OU, create a new user and put it under the new OU. After that I import the administrative template and applied it to the new OU. I login using the new user from Win XP PC and it does not work. I still can see the flash drive. I have even uninstall the flash drive from the PC and connect back. Windows XP still install back the driver and I am able to use back the flash drive. Please advise if there is any additional steps I need to do in order for it to work? Thank you in advance. "M H Affendi" wrote: > Hi, > > I have found the website that you have provided me. I will test it out and > update back if I encounter any problems. Thanks again for the url. > > "Jabez Gan [MVP]" wrote: > > > Hi, > > > > Have you gone through this link: > > > > http://www.petri.co.il/disable_usb_disks_with_gpo.htm ? > > > > -- > > Jabez Gan > > Microsoft MVP: Windows Server - File Storage > > "M H Affendi" <MHAffendi@discussions.microsoft.com> wrote in message > > news:B9C908AC-F227-4D01-B0EC-5BBEF9A72736@microsoft.com... > > >I am running AD on Windows Server 2003. My company is planning to apply a > > > security policy to block users from copying out data from their PC to > > > their > > > USB flash drive/external drive. The policy is supposedly to block only the > > > USB flash drive/external drive and not the USB mouse/keyboard. Do anybody > > > know how to do this using Group Policy Object or can anybody direct me to > > > the > > > appropriate website? For your info, the client PC is running on Win XP and > > > 2000 Pro. Thanks. > >
Guest M H Affendi Posted December 18, 2007 Posted December 18, 2007 Re: How To Disable USB Removable Disk Using GPO? Update ===== I manage to make it work after a couple of hours trying. After that problem is solved, a new problem come up. After I changed back group policy setting (change Disable USB Removable Drives usbstore.sys driver status to Started), I am still unable to access my flash drive. I have tried refreshing the policy and reboot the domain controller a couple of time but to no avail. Does anybody have any advise how to solve this? Thanks. "M H Affendi" wrote: > Dear Jabez, > > I have tried as per article but it does not seems to work. I have created > new OU, create a new user and put it under the new OU. After that I import > the administrative template and applied it to the new OU. I login using the > new user from Win XP PC and it does not work. I still can see the flash > drive. I have even uninstall the flash drive from the PC and connect back. > Windows XP still install back the driver and I am able to use back the flash > drive. Please advise if there is any additional steps I need to do in order > for it to work? Thank you in advance. > > "M H Affendi" wrote: > > > Hi, > > > > I have found the website that you have provided me. I will test it out and > > update back if I encounter any problems. Thanks again for the url. > > > > "Jabez Gan [MVP]" wrote: > > > > > Hi, > > > > > > Have you gone through this link: > > > > > > http://www.petri.co.il/disable_usb_disks_with_gpo.htm ? > > > > > > -- > > > Jabez Gan > > > Microsoft MVP: Windows Server - File Storage > > > "M H Affendi" <MHAffendi@discussions.microsoft.com> wrote in message > > > news:B9C908AC-F227-4D01-B0EC-5BBEF9A72736@microsoft.com... > > > >I am running AD on Windows Server 2003. My company is planning to apply a > > > > security policy to block users from copying out data from their PC to > > > > their > > > > USB flash drive/external drive. The policy is supposedly to block only the > > > > USB flash drive/external drive and not the USB mouse/keyboard. Do anybody > > > > know how to do this using Group Policy Object or can anybody direct me to > > > > the > > > > appropriate website? For your info, the client PC is running on Win XP and > > > > 2000 Pro. Thanks. > > >
Recommended Posts