Re: Disabling USB ports and external disk drives

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: VEZF (anonymous_at_discussions.microsoft.com)
Date: 07/30/04 

Date: Fri, 30 Jul 2004 14:41:42 -0700

Thank you, Mike.

I'll try.

>-----Original Message-----
>"VEZF" <anonymous@discussions.microsoft.com> wrote in
message
>news:774701c4766e$afb82ea0$a301280a@phx.gbl...
>> Hello, everyone.
>>
>> Does anybody know how can I disable USB ports and
external
>> disk drives with Active Directory policies?
>>
>> Thanks for your help.
>
>According to this page:
>
>http://www.experts-exchange.com/Networking/Q_20571610.html
>
>there's no group policy available to disable USB, but
there is a VBScript
>Here:
>
>http://www.heise.de/ct/ftp/result.xhtml?
url=/ct/ftp/03/08/190/default.shtml&words=USB
>
>that provides a workaround.
>
>Also, there's:
>
>http://www.protect-me.com/usb_storage_devices_risks.html
>
>which has a clever suggestion, simply moving the
DRIVER.CAB file to a
>location that only Admins can access. Of course, this
doesn't help if they
>bring in their own drivers.
>
>And then another idea at:
>
>http://www.mail-
archive.com/nt2000@ls.swynk.com/msg11158.html
>
>"What you want to do is to create a group policy that
will only allow
>perhaps system or domain admin rights to the following key
(s)
>HKLM\System\CurrentControlSet\Service\USBhub
>HKLM\System\CurrentControlSet\Service\USBuhci make sure
you make the
>entry start to 0
>HKML\System\CurrentControlSet\Service\usbstor"
>
>--
>
>Mike Brown
>Asset Forwarding Corp.
>EPA-compliant Electronics Recycling
>DoD 5220.22-M Data Elimination
>http://www.assetforwarding.com
>
>
>.
>

Relevant Pages