Disabling USB flash drive use via group policy

69420 pts.
Tags:
Group Policy
Microsoft Windows Server 2003
Microsoft Windows Vista
Microsoft Windows XP
Security
USB Flash drives
Do you know of a way to effectively disable USB flash drives while permitting other USB devices on client computers through a group policy? Our systems administrator has tried a couple of alternatives, but some of them completely disable the USB ports, and others just block some specific types or models of flash drives. The servers are running Windows Server 2003, and the clients are XP and Vista. Thanks.

Answer Wiki

Thanks. We'll let you know when a new response is added.

Hi Carlos, this post on Petri’s site is a step by step guide to do it.

Hi Sir,

It didnt work for me..i have not seen Custom Policy Settings>Restrict Drives in my GPO

Hope you help me with this…

Thanks

It’s possible to simply disable USB ports support in PC BIOS in order to prevent and forbid computer user from
using USB removable flash drive or mass storage device (portable hard disk drive) to copy and transfer data and
files. However, disabling USB ports totally also shutdown the ability for system to use USB based keyboard,
mouse, webcam, printer, scanner and etc, which has become a common connectivity norm in modern computer.
As a workaround, use the following registry hack to stop USB Mass Storage Device drivers from starting when
the system boots up.
Run Registry 1. Editor (regedit).
Navigate to the following registry key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsbStor
2.
3. In the right pane, double click on the Start value name.
Storage Economics Paper
IDC Paper- Drive Down Overall Cost of
Storage Infrastructure.
www.HDS.com
FTDI Embedded USB Host IC
Vinculum – new range of easy to use USB
Host Chips from FTDI
www.Vinculum.com
Disable USB Removable Mass Storage Devi

Discuss This Question: 2  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • carlosdl
    Thanks Alessandro. We will give it a try.
    69,420 pointsBadges:
    report
  • carlosdl
    [...] Adobe Product Security Incident Response Team (PSIRT) put an intriguing blog post on Disabling USB flash drive use via group policyHere’s a quick excerptNew Question Created… [...]
    0 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following