Ask Experts Questions for FREE Help !
Ask
Page 1 of 2 1 2 >

Disable USB memory stick in the network

Asked Mar 27, 2008, 03:45 AM — 16 Answers
Dear

How I can disable usb memory stick in my company . I won't do that on network level not on user level

Can I do that in isa 2006 ?


Please advice

Search this Thread
Share |
16 Answers
Curlyben's Avatar
Curlyben Posts: 18,073, Reputation: 8728
Admin & Wine Expert
  
#2

Mar 27, 2008, 03:46 AM
You can use GPO to do this, BUT it would mean disabling USB connections completely.
The knock on of this would be NO USB Keyboards or mice.
Helpful
lamapalestine's Avatar
lamapalestine Posts: 7, Reputation: 1
New Member
  
#3

Mar 27, 2008, 05:18 AM
I don't found it in GPO

Please clarify
Helpful
NeedKarma's Avatar
NeedKarma Posts: 10,230, Reputation: 8855
Uber Member
  
#4

Mar 27, 2008, 05:33 AM
My IT boys have been looking for a way to do this for a while. I don't think it is currently possible in a Windows world though I believe a future add-on is coming to deal with that.
Helpful
Curlyben's Avatar
Curlyben Posts: 18,073, Reputation: 8728
Admin & Wine Expert
  
#5

Mar 27, 2008, 05:48 AM
I know you can do it at a machine level by changing the default hardware profile.
As for using GPO it is possible with 2003 enterprise server, pain in the bottom to find though.
Helpful
chuckhole's Avatar
chuckhole Posts: 850, Reputation: 236
Senior Member
  
#6

Mar 28, 2008, 08:00 AM
You can perform this with a GPO and it would NOT disable all other USB devices. By setting the permissions on each local PC to three files:

Set DENY Permissions for Domain Users to:
%SYSTEMROOT%\INF\USBSTOR.INF
%SYSTEMROOT%\INF\USBSTOR.PNF
%SYSTEMROOT%\SYSTEM32\DRIVERS\USBSTOR.SYS

This will have to be added to the Security templates in the Machine part of the GPO.

By denying permissions to these files, the user will not be able run the USB Mass Storage Driver. This will effect ANY storage device connected by USB.
Helpful  (3)
michealb's Avatar
michealb Posts: 484, Reputation: 684
Full Member
  
#7

Mar 28, 2008, 09:49 AM
On my small network clients I use a program called ScriptLogic. It basically a graphical gpo editor but its very easy to use and lets you set lots of things that you wouldn't even have thought to set through GPO, including no allowing usb drives.
Helpful  (3)
NeedKarma's Avatar
NeedKarma Posts: 10,230, Reputation: 8855
Uber Member
  
#8

Mar 28, 2008, 10:11 AM
Thanks Michael,
I dug into their site and found this: [url=http://www.scriptlogic.com/products/desktopauthority/usbsecurity.asp]Desktop Authority
Helpful
NeedKarma's Avatar
NeedKarma Posts: 10,230, Reputation: 8855
Uber Member
  
#9

Mar 28, 2008, 10:43 AM
Added complication: just spoke with them and I see why they haven't implemented anything yet. Disabling all USB ports would be disastrous since many devices use them: mice, cameras, printers, keyboards. Apparently they are testing a solution that is device-aware. If I find out what that is I'll let you know.
Helpful
michealb's Avatar
michealb Posts: 484, Reputation: 684
Full Member
  
#10

Mar 28, 2008, 11:14 AM
Scriptlogic is device aware. The amount of stuff you can configure with a few mouse clicks is pretty neat and for small offices the overhead that it cuts in administration time is definitely worth the price.
Helpful
Not your question? Ask your question View similar questions
 
Page 1 of 2 1 2 >
Thread Tools Search this Thread
Search this Thread:

Advanced Search

Add your answer here.

Remove Text Formatting
 

Undo
Redo
  
Decrease Size
Increase Size
Bold
Italic
Underline
Align Left
Align Center
Align Right
Ordered List
Unordered List
Decrease Indent
Increase Indent
Insert Email Link
Wrap [QUOTE] tags around selected text
Wrap [CODE] tags around selected text
Wrap [HTML] tags around selected text
Wrap [PHP] tags around selected text
Wrap [YOUTUBE] tags around selected text
Notification Type:



Check out some similar questions!

USB Memory stick [ 3 Answers ]

I've used up two-thirds of my USB memory stick, but now it does not allow me to add more. The window says something about a write-on protection which I have to lift, but which I cannot find. Thanks.

How can I recover file from a different USB memory stick [ 1 Answers ]

I have lost my memory stick and I haven't save a copy of it so how can I recover those file I have save in there

USB stick is not working anymore [ 4 Answers ]

Hi all, Before 2 month I bought USB Stick Sony MicroVault 2GB USM-J. It was normaly working. I never had any problems with stick on any operating system on different computers ( specially XP, and vista). Yesterday I copied large file and remove disk after several minutes. 10 hours later I...

98se how to read & write to USB memory stick [ 1 Answers ]

98se how to read & write to USB memory stick

USB stick not recognized [ 1 Answers ]

When I connect any USB stick to my PC , first it seems to be detected but afterwards a message 'Found new hardware' pops up, trying to recognize the stick but in vain. So ?!

View more Networking questions Search