Tuesday, June 16, 2009

Disable USB Disks with GPO.


In GPEdit.msc (or any other GPO Editor window you're using) click on View > Filtering.

Click to un-select the "Only show policy settings that can be fully managed" check-box. Click Ok.

Now you will be able to see the new settings in the right pane:

You can now configure any of the above settings:

An additional step that needs to be performed before the above tip will work has to do with modifying the file access permissions for 2 files. You need to remove the SYSTEM access permissions from the usbstor.sys and usbstor.inf files.

You can do so by right clicking these files > Properties, then going to the Security tab. There you need to remove the line for the SYSTEM account.

Download the USB_removable_drives_ADM file

No comments:

Post a Comment