I have a script that I’ve picked up from MS to create a GP administrative templat that allows me to block USB Storage (and others, if necessary).
[link]http://support.microsoft.com/kb/555324[/link]
I’m planning on editing it to also block SD cards, but otherwise, I’m leaving it as is.
Once that’s installed (care of an xcopy bat), it adds a template in the GPEdit.msc console with the option to select radio buttons for “enabled” or “disabled” for each storage device in the script.
My question is as follows:
Is there a script or a bat file that could be used to configure those options, once they’re added to GP. I.E. “Double-click this file to enable USB storage.” “Double-click this file to disable USB storage.”