How To Disable USB Removable Disk Using GPO?

[Guest M H Affendi]

I am running AD on Windows Server 2003. My company is planning to apply a

security policy to block users from copying out data from their PC to their

USB flash drive/external drive. The policy is supposedly to block only the

USB flash drive/external drive and not the USB mouse/keyboard. Do anybody

know how to do this using Group Policy Object or can anybody direct me to the

appropriate website? For your info, the client PC is running on Win XP and

2000 Pro. Thanks.

[Guest Jabez Gan [MVP]]

Re: How To Disable USB Removable Disk Using GPO?

 

Hi,

 

Have you gone through this link:

 

http://www.petri.co.il/disable_usb_disks_with_gpo.htm ?

 

--

Jabez Gan

Microsoft MVP: Windows Server - File Storage

"M H Affendi" <MHAffendi@discussions.microsoft.com> wrote in message

news:B9C908AC-F227-4D01-B0EC-5BBEF9A72736@microsoft.com...

>I am running AD on Windows Server 2003. My company is planning to apply a

> security policy to block users from copying out data from their PC to

> their

> USB flash drive/external drive. The policy is supposedly to block only the

> USB flash drive/external drive and not the USB mouse/keyboard. Do anybody

> know how to do this using Group Policy Object or can anybody direct me to

> the

> appropriate website? For your info, the client PC is running on Win XP and

> 2000 Pro. Thanks.

[Guest M H Affendi]

Re: How To Disable USB Removable Disk Using GPO?

 

Hi,

 

I have found the website that you have provided me. I will test it out and

update back if I encounter any problems. Thanks again for the url.

 

"Jabez Gan [MVP]" wrote:

> Hi,

>

> Have you gone through this link:

>

> http://www.petri.co.il/disable_usb_disks_with_gpo.htm ?

>

> --

> Jabez Gan

> Microsoft MVP: Windows Server - File Storage

> "M H Affendi" <MHAffendi@discussions.microsoft.com> wrote in message

> news:B9C908AC-F227-4D01-B0EC-5BBEF9A72736@microsoft.com...

> >I am running AD on Windows Server 2003. My company is planning to apply a

> > security policy to block users from copying out data from their PC to

> > their

> > USB flash drive/external drive. The policy is supposedly to block only the

> > USB flash drive/external drive and not the USB mouse/keyboard. Do anybody

> > know how to do this using Group Policy Object or can anybody direct me to

> > the

> > appropriate website? For your info, the client PC is running on Win XP and

> > 2000 Pro. Thanks.

>

[Guest M H Affendi]

Re: How To Disable USB Removable Disk Using GPO?

 

Dear Jabez,

 

I have tried as per article but it does not seems to work. I have created

new OU, create a new user and put it under the new OU. After that I import

the administrative template and applied it to the new OU. I login using the

new user from Win XP PC and it does not work. I still can see the flash

drive. I have even uninstall the flash drive from the PC and connect back.

Windows XP still install back the driver and I am able to use back the flash

drive. Please advise if there is any additional steps I need to do in order

for it to work? Thank you in advance.

 

"M H Affendi" wrote:

> Hi,

>

> I have found the website that you have provided me. I will test it out and

> update back if I encounter any problems. Thanks again for the url.

>

> "Jabez Gan [MVP]" wrote:

>

> > Hi,

> >

> > Have you gone through this link:

> >

> > http://www.petri.co.il/disable_usb_disks_with_gpo.htm ?

> >

> > --

> > Jabez Gan

> > Microsoft MVP: Windows Server - File Storage

> > "M H Affendi" <MHAffendi@discussions.microsoft.com> wrote in message

> > news:B9C908AC-F227-4D01-B0EC-5BBEF9A72736@microsoft.com...

> > >I am running AD on Windows Server 2003. My company is planning to apply a

> > > security policy to block users from copying out data from their PC to

> > > their

> > > USB flash drive/external drive. The policy is supposedly to block only the

> > > USB flash drive/external drive and not the USB mouse/keyboard. Do anybody

> > > know how to do this using Group Policy Object or can anybody direct me to

> > > the

> > > appropriate website? For your info, the client PC is running on Win XP and

> > > 2000 Pro. Thanks.

> >

[Guest M H Affendi]

Re: How To Disable USB Removable Disk Using GPO?

 

Update

=====

 

I manage to make it work after a couple of hours trying. After that problem

is solved, a new problem come up. After I changed back group policy setting

(change Disable USB Removable Drives usbstore.sys driver status to Started),

I am still unable to access my flash drive. I have tried refreshing the

policy and reboot the domain controller a couple of time but to no avail.

Does anybody have any advise how to solve this? Thanks.

 

"M H Affendi" wrote:

> Dear Jabez,

>

> I have tried as per article but it does not seems to work. I have created

> new OU, create a new user and put it under the new OU. After that I import

> the administrative template and applied it to the new OU. I login using the

> new user from Win XP PC and it does not work. I still can see the flash

> drive. I have even uninstall the flash drive from the PC and connect back.

> Windows XP still install back the driver and I am able to use back the flash

> drive. Please advise if there is any additional steps I need to do in order

> for it to work? Thank you in advance.

>

> "M H Affendi" wrote:

>

> > Hi,

> >

> > I have found the website that you have provided me. I will test it out and

> > update back if I encounter any problems. Thanks again for the url.

> >

> > "Jabez Gan [MVP]" wrote:

> >

> > > Hi,

> > >

> > > Have you gone through this link:

> > >

> > > http://www.petri.co.il/disable_usb_disks_with_gpo.htm ?

> > >

> > > --

> > > Jabez Gan

> > > Microsoft MVP: Windows Server - File Storage

> > > "M H Affendi" <MHAffendi@discussions.microsoft.com> wrote in message

> > > news:B9C908AC-F227-4D01-B0EC-5BBEF9A72736@microsoft.com...

> > > >I am running AD on Windows Server 2003. My company is planning to apply a

> > > > security policy to block users from copying out data from their PC to

> > > > their

> > > > USB flash drive/external drive. The policy is supposedly to block only the

> > > > USB flash drive/external drive and not the USB mouse/keyboard. Do anybody

> > > > know how to do this using Group Policy Object or can anybody direct me to

> > > > the

> > > > appropriate website? For your info, the client PC is running on Win XP and

> > > > 2000 Pro. Thanks.

> > >