Resources For IT Professionals
Post an article
Wikis - Page Details
  • First published by
  • When: 16 Sep 2011 6:26 AM
  • Last revision by (aMicrosof)
  • When: 24 Aug 2012 11:00 AM
  • Revisions: 18
  • Comments: 13
Options
RSSSubscribe to Article (RSS)
Can You Improve This Article?
Positively! Click Sign In to add the tip, solution, correction or comment that will help other users.

Report inappropriate content using these instructions.
Wiki  >  TechNet Articles  >  How to Prevent Users from Connecting to a USB Storage Device by Group Policy

How to Prevent Users from Connecting to a USB Storage Device by Group Policy

How to Prevent Users from Connecting to a USB Storage Device by Group Policy

To prevent users from connecting to USB storage devices by group policy

1- If a USB storage device is already installed on the computer:

  • Click Start – All programs - Administrative Tools – Group Policy Management.
  • Create or Edit Group Policy Objects
  • Expand Computer Configuration – Preferences – Windows Settings.
  • Right click Registry – New – Registry Item.

General Tab

  • Action : Update
  • Hive : HKEY_LOCAL_MACHINE
  • Key path : SYSTEM\CurrentControlSet\Services\UsbStor
  • Value name : Start
  • Value type : REG_DWORD
  • Value data : 00000004

Notes:
- You can apply this method on User Configration too.
- You can revert this method (1) by change Value data : 00000004 to Value data : 00000003

 

 

2- If a USB storage device is not already installed on the computer:

  • Click Start - All programs – Administrative Tools – Group Policy Managment.
  • Create or Edit Group Policy Objects
  • Expand Computer Configuration – Police - Windows Settings – Security Settings .
  • Right click File System- Add file or folder.

Browse to this file

  • %SystemRoot%\Inf\Usbstor.pnf
  • assign the user or the group and the local SYSTEM account Deny permissions.

Browse to this file too

  • %SystemRoot%\Inf\Usbstor.inf
  • Assign the user or the group and the local SYSTEM account Deny permissions.

 This article was originally posted at http://mabdelhamid.wordpress.com/2011/09/10/how-can-i-prevent-users-from-connecting-to-a-usb-storage-device-by-group-policy/

, , , , , , , , , , , , , [Edit tags]
Leave a Comment
  • Please add 5 and 4 and type the answer here:
  • Post
Wiki - Revision Comment List(Revision Comment)
Sort by: Published Date | Most Recent | Most Useful
Comments
  • 20 Jan 2012 11:10 PM

    M.Abdelhamid edited Revision 14. Comment: Edit new information in method 1

  • 23 Dec 2011 2:08 PM

    M.Abdelhamid edited Revision 13. Comment: Non English Language

  • 30 Nov 2011 10:44 PM

    M.Abdelhamid edited Revision 10. Comment: Tags

  • 30 Nov 2011 10:39 PM

    M.Abdelhamid edited Revision 9. Comment: Tags and format

  • 30 Nov 2011 10:28 PM

    M.Abdelhamid edited Revision 8. Comment: Adding Tags and Page format

  • 21 Nov 2011 11:56 PM

    M.Abdelhamid edited Revision 3. Comment: i try this option [toc]

Page 1 of 1 (6 items)
Wikis - Comment List
Sort by: Published Date | Most Recent | Most Useful
Posting comments is temporarily disabled until 10:00am PST on Saturday, December 14th. Thank you for your patience.
Comments
  • Posted by
    on 21 Nov 2011 11:56 PM

    M.Abdelhamid edited Revision 3. Comment: i try this option [toc]

  • Posted by
    on 30 Nov 2011 10:28 PM

    M.Abdelhamid edited Revision 8. Comment: Adding Tags and Page format

  • Posted by
    on 30 Nov 2011 10:39 PM

    M.Abdelhamid edited Revision 9. Comment: Tags and format

  • Posted by
    on 30 Nov 2011 10:44 PM

    M.Abdelhamid edited Revision 10. Comment: Tags

  • Posted by
    on 23 Dec 2011 2:08 PM

    M.Abdelhamid edited Revision 13. Comment: Non English Language

  • Posted by
    on 29 Dec 2011 2:26 AM

    Again Great job!

  • Posted by
    on 30 Dec 2011 3:36 AM

    Thanks Gokhan

  • Posted by
    on 20 Jan 2012 3:24 AM

    might be useful if you added the info how to revert the change for method 1 (i believe the default value would be 0x3, but not 100% sure). sometimes requirements in a company change, and then its hard to find that info fast

  • Posted by
    on 20 Jan 2012 3:25 AM

    might be useful if you added the info how to revert the change for method 1 (i believe the default value would be 0x3, but not 100% sure). sometimes requirements in a company change, and then its hard to find that info fast

  • Posted by
    on 20 Jan 2012 11:05 PM

    Hi FZB

    Thanks for advice me

    You can Revert the change in method 1 by set Value data : 00000003. i used it many time for some clients

  • Posted by
    on 20 Jan 2012 11:10 PM

    M.Abdelhamid edited Revision 14. Comment: Edit new information in method 1

  • Posted by
    on 6 Feb 2012 2:24 AM

    Nice Article ! Good Job.

  • Posted by
    on 6 Feb 2012 2:43 AM

    Thanks Santosh

Page 1 of 1 (13 items)