+ Reply to Thread
Results 1 to 2 of 2

Thread: USB Storage Devices

  1. #1
    jwilliams is offline Getting Started on GPanswers.com
    Join Date
    Dec 1969
    Posts
    4

    Default

    I know I am new to GP, but I am really puzzled. I have been able to set
    up many GPO to control how the users can use their PCs very
    successfully, but am stymied about this one issue. USB Storage use!
    I have been trying to shut down USB Storage use for some time with GP,
    but to no avail. I have created a No USB GPO with the .adm templates
    from several downloads, but whenever I attach it to a OU in the Active
    Directory, it does NOT prevent the USB sticks from working! If I go to
    the PC and edit the Registry manually, I can shut down its use. Not
    what I want to do. Attached are the adm file and GPO that I have
    created. Can you simply tell me where my logic is in error? Hopefully,
    it is obvious to someone else, but I am going blind.
    Thanks for any help,
    Jim

    ***********************************
    CLASS MACHINE
    CATEGORY !!category
    CATEGORY !!categoryname
    POLICY !!policynameusb
    KEYNAME \\\"SYSTEM\\\\CurrentControlSet\\\\Services\\\\USB STOR\\\"
    EXPLAIN !!explaintextusb
    PART !!labeltextusb DROPDOWNLIST REQUIRED

    VALUENAME \\\"Start\\\"
    ITEMLIST
    NAME !!Disabled VALUE NUMERIC 3 DEFAULT
    NAME !!Enabled VALUE NUMERIC 4
    END ITEMLIST
    END PART
    END POLICY
    POLICY !!policynamecd
    KEYNAME \\\"SYSTEM\\\\CurrentControlSet\\\\Services\\\\Cdr om\\\"
    EXPLAIN !!explaintextcd
    PART !!labeltextcd DROPDOWNLIST REQUIRED

    VALUENAME \\\"Start\\\"
    ITEMLIST
    NAME !!Disabled VALUE NUMERIC 1 DEFAULT
    NAME !!Enabled VALUE NUMERIC 4
    END ITEMLIST
    END PART
    END POLICY
    POLICY !!policynameflpy
    KEYNAME \\\"SYSTEM\\\\CurrentControlSet\\\\Services\\\\Flp ydisk\\\"
    EXPLAIN !!explaintextflpy
    PART !!labeltextflpy DROPDOWNLIST REQUIRED

    VALUENAME \\\"Start\\\"
    ITEMLIST
    NAME !!Disabled VALUE NUMERIC 3 DEFAULT
    NAME !!Enabled VALUE NUMERIC 4
    END ITEMLIST
    END PART
    END POLICY
    POLICY !!policynamels120
    KEYNAME \\\"SYSTEM\\\\CurrentControlSet\\\\Services\\\\Sfl oppy\\\"
    EXPLAIN !!explaintextls120
    PART !!labeltextls120 DROPDOWNLIST REQUIRED

    VALUENAME \\\"Start\\\"
    ITEMLIST
    NAME !!Disabled VALUE NUMERIC 3 DEFAULT
    NAME !!Enabled VALUE NUMERIC 4
    END ITEMLIST
    END PART
    END POLICY
    END CATEGORY
    END CATEGORY

    [strings]
    category=\\\"Custom Policy Settings\\\"
    categoryname=\\\"Restrict Drives\\\"
    policynameusb=\\\"Disable USB Removable Drives\\\"
    policynamecd=\\\"Disable CD-ROM\\\"
    policynameflpy=\\\"Disable Floppy\\\"
    policynamels120=\\\"Disable High Capacity Floppy\\\"
    explaintextusb=\\\"Disables the USB Removable Drives capability by disabling the usbstor.sys driver. \\\\n\\\\nSelect the

    deleted
    **********************************

  2. #2
    jwilliams is offline Getting Started on GPanswers.com
    Join Date
    Dec 1969
    Posts
    4

    Default

    OK. So I just need to read more. I was applying this to an OU with users only. I needed to add the Computers to the OU. Now the USB devices are shut down, but I still am having trouble with A: drive and CDs. Will press on.
    Sorry for the three entries, I didn't realize each got posted when it complained about errors .
    Jim

+ Reply to Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts

Search Engine Friendly URLs by vBSEO