Resources For IT Professionals
Post an article
Wikis - Page Details
  • First published by (eMicrosof)
  • When: 1 Nov 2010 1:52 PM
  • Last revision by (eMicrosoft Community Contributor, Microsoft Partne)
  • When: 2 Aug 2013 8:22 AM
  • Revisions: 14
  • Comments: 4
Options
RSSSubscribe to Article (RSS)
Can You Improve This Article?
Positively! Click Sign In to add the tip, solution, correction or comment that will help other users.

Report inappropriate content using these instructions.
Wiki  >  TechNet Articles  >  Active Directory: How to Block USB Devices (dsforum2wiki)

Active Directory: How to Block USB Devices (dsforum2wiki)

Active Directory: How to Block USB Devices (dsforum2wiki)

Table of Contents



If you want to prevent users from using USB devices, you can follow the steps in either of these articles:
1. Manually modify the registry key which is described in the KB article at http://support.microsoft.com/kb/823732

If the client computers run Windows 2000, you have to use this option. This article has a script for this: http://badzmanaois.blogspot.com/2008/09/disable-usb-storage-using-vbs-script_07.html

2. Using Group Policy as described in the KB article at http://support.microsoft.com/kb/555324

The procedures in KB article 555324 will not disable the USB ports for mouse or keyboard unless you select that option. You have the option to disable USB devices such as removable storage, CD ROM drives, floppy drives, or disable all USB ports.
Here is another article that covers how to configure this by using a GPO: http://www.petri.co.il/disable_usb_disks_with_gpo.htm

New Policies in Windows Vista and Windows Server 2008
In Windows Server 2008, there is a set of built-in policies on removable storage access and installation. It makes restricting USB mass storage devices easier. To use these policies, the client computers must run Windows Vista or later. The following policies specify read and write permission on all kinds of removable storage devices:

1.       Computer Configuration-->Policies-->Administrative Templates-->System-->Removable Storage Access

2.       User Configuration-->Policies-->Administrative Templates-->System-->Removable Storage Access

The following policy controls the installation of removable storage device:
  1. Computer Configuration-->Policies-->Administrative Templates-->System-->Device Installation-->Device Installation Restrictions
 
More detailed information: Managing Hardware Restrictions via Group Policy at http://www.microsoft.com/technet/technetmag/issues/2007/06/GroupPolicy/default.aspx

References

 
  

Other Languages

This article is also available in the following languages:

, , , , , , , , , , , , , , [Edit tags]
Leave a Comment
  • Please add 7 and 3 and type the answer here:
  • Post
Wiki - Revision Comment List(Revision Comment)
Sort by: Published Date | Most Recent | Most Useful
Comments
  • 1 Jun 2012 12:24 PM

    Yagmoth555 edited Revision 11. Comment: great article!, adding a fr-FR link

  • 15 May 2012 11:48 AM

    Ed Price - MSFT edited Revision 10. Comment: TOC, tags

  • 9 Feb 2011 9:41 AM

    Ed Price MSFT edited Revision 5. Comment: Updated font to Segoe UI, size 12.

  • 9 Feb 2011 9:40 AM

    Ed Price MSFT edited Revision 4. Comment: Updated title per style standards.

Page 1 of 1 (4 items)
Wikis - Comment List
Sort by: Published Date | Most Recent | Most Useful
Posting comments is temporarily disabled until 10:00am PST on Saturday, December 14th. Thank you for your patience.
Comments
  • Posted by
    on 9 Feb 2011 9:40 AM

    Ed Price MSFT edited Revision 4. Comment: Updated title per style standards.

  • Posted by
    on 9 Feb 2011 9:41 AM

    Ed Price MSFT edited Revision 5. Comment: Updated font to Segoe UI, size 12.

  • Posted by
    on 15 May 2012 11:48 AM

    Ed Price - MSFT edited Revision 10. Comment: TOC, tags

  • Posted by
    on 1 Jun 2012 12:24 PM

    Yagmoth555 edited Revision 11. Comment: great article!, adding a fr-FR link

Page 1 of 1 (4 items)