Using GPPE to stop USB Storage devices

[PreviousPoster]

GPPE make it a sinch to restrict removable storage devices, cd-roms, WPD's (Windows Portable Devices) and floppy access. Each of these can be set to read-only or write-only.
You can even specify a specific GUID of a piece of hardware to restrict! If you wanted only 8 GB Ipod's restricted, you can do it!

If you look under User or Computer Settings \ Policies \ Administrative Templates \ System \ Removable Storage Access\

Here you can deny read or write access to -
Removable storage devices
All removable storage Devices
CD/dvd roms
floppy drives
WPD's (windows portable devices)
Tape drives

You can also set custom GUID's (hardware ID's) as broad as "GenCdRom" or specific as "IDE\NECVMWar_VMware_IDE_CDR00_______________1 .00" This allows you to say "all cdrom's" or only cd-roms that are made by vmware!!!

Imagin the look on a users face when their 2 gig ipod works but not their 4 gig ipod, it's possible!

Dont forget you need a Vista SP1 + RSAT or windows 2008 server in your AD environment to set these settings.

-Aaron

I'm glad you got so much out of the course / training.

Thanks for being an awesome student !!