Re: Disabling USB mass storage

From: Weber Ress (weber_ress_at_hotmail.com)
Date: 03/04/05

  • Next message: Steven Hay: "RE: Disabling USB mass storage" 
    Date: Fri, 04 Mar 2005 15:08:57 -0300
To: Steven Hay <shay@communitysavings.ca>

    Hi,

    The GPO works with an Apple IPod ??

    Thank's

    Weber Ress

    Steven Hay wrote:
    > Removable drives, yes.
    >
    > If we can do it by GPO then we're hoping we can decide what systems/users
    > can be allowed to use removable storage devices (like camera's, USB drives,
    > etc). Ideally we'd like to have it so a few manager's systems are allowed,
    > as well as IT staff.
    >
    > -----Original Message-----
    > From: Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
    > [mailto:sbradcpa@pacbell.net]
    > Sent: March 3, 2005 10:14 PM
    > To: Steven Hay
    > Cc: 'focus-ms@securityfocus.com'
    > Subject: Re: Disabling USB mass storage
    >
    >
    > HOW TO: Disable the Use of USB Storage Devices in Windows XP:
    > http://support.microsoft.com/default.aspx?scid=kb;en-us;823732
    >
    > Disable completely?
    >
    > Steven Hay wrote:
    >
    >
    >>Good topic question, one we're having issues with as well, but with XP
    >>SP1.
    >>
    >>We want to disable any removable drives from working on our 400+
    >>workstations without having to visit each one.
    >>
    >>I tried denying access to usbstor.sys in the GPO, and confirmed that
    >>the policy was applied to our test system. But it seems like the
    >>system privliges override the GPO rights (I'm guessing) as the
    >>removable drive letter pops up and is usable when a USB drive is
    >>connected.
    >>
    >>Anyone have any experience with locking these down using GPO?
    >>
    >>Steve
    >>
    >>-----Original Message-----
    >>From: Moser, Scott [mailto:scott.moser@smead.com]
    >>Sent: March 3, 2005 12:40 PM
    >>To: Martin a Marika TYDOROVCI; focus-ms@securityfocus.com
    >>Subject: RE: Disabling USB mass storage
    >>
    >>
    >>Create new key
    >>HKLM\System\CurrentControlSet\Control\StorageDevicePolicies
    >>and then create REG_DWORD called WriteProtect and set to 1. This will
    >>prevent write only (not read) in XP SP2 only.
    >>
    >>-----Original Message-----
    >>From: Martin a Marika TYDOROVCI [mailto:tydy@szm.sk]
    >>Sent: Wednesday, March 02, 2005 2:10 PM
    >>To: focus-ms@securityfocus.com
    >>Subject: Disabling USB mass storage
    >>
    >>Hi list,
    >>
    >>Does anyone knows a way to disable USB mass storage device in Win XP? I
    >>need to disable using devices such as USB flash drive, card readers,
    >>etc.
    >>
    >>Regards
    >>
    >>-----------------------------------------------------------------------
    >>-
    >>---
    >>------------------------------------------------------------------------
    >>---
    >>
    >>
    >>
    >>-----------------------------------------------------------------------
    >>----
    >>---------------------------------------------------------------------------
    >>Please note that Internet email is not always private, secure or reliable.
    >>The sender accepts no liability for any damages caused by any virus
    >>inadvertently transmitted with this email. Any opinion expressed in this
    >>email is solely that of the author, unless clearly indicated otherwise.
    >>This email, and any attachments, may contain confidential and/or
    >
    > proprietary
    >
    >>information that is intended only for use by the addressee. If you are not
    >>the intended recipient, any use, dissemination, forwarding, printing, or
    >>copying of this email is strictly prohibited. If you received this email
    >
    > in
    >
    >>error, please delete the email and advise the sender of the delivery error.
    >>
    >>-----------------------------------------------------------------------
    >>----
    >>---------------------------------------------------------------------------
    >>
    >>
    >>
    >>
    >
    >

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

  • Next message: Steven Hay: "RE: Disabling USB mass storage"

    Relevant Pages

    • Re: Folder Redirect to NAS Intel SS4000-E
      ... I can't for the life of me think that GPO is doing anything magical ... We are trying to redirect all the user documents folder to a network ... list on the NAS. ... with physical drives through disk management (map to folder, ...
      (microsoft.public.windows.server.active_directory)
    • RE: Disabling USB mass storage
      ... Removable drives, yes. ... If we can do it by GPO then we're hoping we can decide what systems/users ... >Subject: Disabling USB mass storage ...
      (Focus-Microsoft)
    • Re: AD reorganization
      ... A concern has come up that moving users or renaming an OU might cause issues with users trying to log onto the domain, or cause issues with accessing data on file servers. ... Another qestion i have is if i move a group of users from one OU that has a gpo attached to it and the GPO maps a drive or a printer, when the account gets moved to the target OU and that target OU has gpo that also maps a drive and printer, then what will happen to the old settings that got applied? ... So for your printer and drive mapping scripts -- people will have to log off and log back in to get the new drives and printers applied. ... Microsoft MVP - Windows Server - Group Policy. ...
      (microsoft.public.windows.server.active_directory)
    • RE: Customize save locations
      ... via GPO to restrict users from saving items on the TS ... Make sure the My Documents folder is redirected to their network home ... > Their client drives are mapped as well as a network file share. ...
      (microsoft.public.windows.terminal_services)
    • Re: Customize save locations
      ... via GPO to restrict users from saving items on the TS ... >> Their client drives are mapped as well as a network file share. ...
      (microsoft.public.windows.terminal_services)
    Loading