Stop using USB in office computers

80 pts.
Active Directory
Group Policy
USB Flash drives
User Permissions
How can I define a GP so that users cannot use their USB Flash disks?

Answer Wiki

Thanks. We'll let you know when a new response is added.

Hi Aspire,

Please look here and here for information from Microsoft.

I hope this will for you.

Thanks & Regards,


This might also be helpful:

The site also has a few other security issues that employers should be aware of.

It is actually better to completely disable the USB port in your computer system to make sure any USB devices cannot be plugged in to the computer system. Using the group policy could sometimes create conflict that causes other programs and Windows features to stop working.

Discuss This Question: 6  Replies

There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.
  • Cults14
    I'm not a techie, but that looks like a very simple question which needs fuller explanation i.e. why do you want to do this in the first place? If you're concerned about DPL (Data Leak Prevention), prepare yourself for a rocky ride as (a) it's still a relatively new area and (b) the range of options - problems/solutions and vendors - is almost overpowering. If DLP is an issue for you, or if you're concerned about the introduction of unwanted material (malware, 3rd party IPR, media-rich files etc etc) then how do you know that you have a problem in the first place? General advice I've seen seems to be (a) install something like DeviceWall (granular policies) to monitor what's actually going on (b) develop an Acceptable Use Policy (AUP) and (c) implement and monitor your AUP. Disabling USB ports disables any kind of USB device and this may not be what you (or your users or managers) intend or find acceptable. At the other end of the scale, Cisco have a product which does everything which DeviceWall (and others do), plus can prevent emailing, printing, copying, save as from specified folder locations - so if you're paranoid about your IPR leaving the builing, it's possible to go into complete lock-down - you can even disable screen captures!! Hope this help.
    70 pointsBadges:
  • Sharon Fisher
    Good for you for looking at this issue! It's a big security hole in many companies.
    9,685 pointsBadges:
  • Kevin Beaver
    if you have a complicated enough environment, you really should consider DLP software to protect your endpoints in this way, among others. Symantec is known as the leader in the space but there are plenty of other lower-cost alternatives including cloud-based solutions.
    27,515 pointsBadges:
  • Deebak
    If you are around 10 to 20 PC in office. you Can Go With USB Disk Security Software. that Will be Quite Useful. I am using in it in my office. I will unlock it whenever needed
    40 pointsBadges:
  • Harisheldon
    The DOD started blocking USB ports a couple of years ago due to the fact users were taking classified documents and putting them on USB drives and then plugging the drives into unclassified computers.  A HUGE NO-NO!!!  You can create a GPO to block the use of the USB ports.

    Go to the article below and it will show you how to create the GPO and enforce it.  Good luck.
    12,915 pointsBadges:
  • Brijesh
    Check out Windows Group Policy to secure and restrict USB devices using link which will help you.
    14,450 pointsBadges:

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

Thanks! We'll email you when relevant content is added and updated.


Share this item with your network: