Question

Locked

How to disable write to usb storage device in a win 2008 DC environment?

By alexk2011 ·
I have an network environment with 2008R2 DC and WIN 7 Pro clients. I would like to know how to disable usb storage devices from working while still keeping usb ports functional for other types of devices like keyboards and mice via GPO on Win 2008 for selected users.I want to do it central.

This conversation is currently closed to new comments.

8 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Answers

Collapse -

Registry Hack to Disable Writing to USB Drives

You can disable writing to USB devices altogether using this simple registry hack:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\StorageDevicePolicies]
WriteProtect=dword:00000001

OR:
download one of the following registry tweaks to enable or disable writing to USB drives.

http://www.howtogeek.com/wp-content/uploads/EnableUSBWrite.zip

http://www.howtogeek.com/wp-content/uploads/DisableUSBWrite.zip

http://www.howtogeek.com/howto/windows-vista/registry-hack-to-disable-writing-to-usb-drives/

Collapse -

Reponse To Answer

by alexk2011 In reply to Registry Hack to Disable ...

I am looking for a solution to work from Group Policy of Win 2008 R2.

Collapse -

try this

by markp24 In reply to How to disable write to u ...

I believe the setting is in
Computer Configuration ??? Administrative Templates ??? System ???Device Installation ??? Device Installation Restrictions.

try googling" windows-7-to-lock-down-removable-media"

Collapse -

hi did my suggestion work for you?

by markp24 In reply to How to disable write to u ...

i have some urls to show you more just cant post them on tr

Collapse -

Reponse To Answer

by alexk2011 In reply to hi did my suggestion work ...

I will try tomorrow. The settings you gave me is on Win 2008 DC or in Win 7 client? As i told you i want to do it central from 2008 DC and not from client

Collapse -

Reponse To Answer

by markp24 In reply to hi did my suggestion work ...

this path should appear on both gpo consoles for local policy and domain policy

Collapse -

Reponse To Answer

by markp24 In reply to hi did my suggestion work ...

also try this
got to this site oreilly.com/pub/a/windows/2005/11/15/disabling-usb-storage-with-group-policy
and add a dot html at the end

sorry cant paste links on TR for some reason

Back to Windows Forum
8 total posts (Page 1 of 1)  

Related Discussions

Related Forums