How to install an ADM file
- From: David Sherman <dshermin@xxxxxxxxxxxxx>
- Date: Sat, 11 Mar 2006 15:38:00 -0500
Using this link as the source http://bink.nu/Article4191.bink
I want to create an adm that I could use to disable access to either
USB, floppy or CD.
Simon Geary MVP developed a cool policy template (ADM file) to disable
USB, CD-ROM, Floppy Disk and LS-120 drivers as written in his KB
article 555324
By default, Group Policy does not offer a facility to easily disable
drives containing removable media, such as USB ports, CD-ROM drives,
Floppy Disk drives and high capacity LS-120 floppy drives. However,
Group Policy can be extended to use customised settings by applying an
ADM template. The ADM template in this article allows an Administrator
to disable the respective drivers of these devices, ensuring that they
cannot be used.
Download ADM file from Bink.nu. I have downloaded the ADM file. It is
blank.
If I use the information from here:
http://support.microsoft.com/default.aspx?scid=kb;en-us;555324. This
page shows code of:
CLASS MACHINE
CATEGORY !!category
CATEGORY !!categoryname
POLICY !!policynameusb
KEYNAME "SYSTEM\CurrentControlSet\Services\USBSTOR"
EXPLAIN !!explaintextusb
PART !!labeltextusb DROPDOWNLIST REQUIRED
VALUENAME "Start"
ITEMLIST
NAME !!Disabled VALUE NUMERIC 3 DEFAULT
NAME !!Enabled VALUE NUMERIC 4
END ITEMLIST
END PART
END POLICY
POLICY !!policynamecd
KEYNAME "SYSTEM\CurrentControlSet\Services\Cdrom"
EXPLAIN !!explaintextcd
PART !!labeltextcd DROPDOWNLIST REQUIRED
VALUENAME "Start"
ITEMLIST
NAME !!Disabled VALUE NUMERIC 1 DEFAULT
NAME !!Enabled VALUE NUMERIC 4
END ITEMLIST
END PART
END POLICY
POLICY !!policynameflpy
KEYNAME "SYSTEM\CurrentControlSet\Services\Flpydisk"
EXPLAIN !!explaintextflpy
PART !!labeltextflpy DROPDOWNLIST REQUIRED
VALUENAME "Start"
ITEMLIST
NAME !!Disabled VALUE NUMERIC 3 DEFAULT
NAME !!Enabled VALUE NUMERIC 4
END ITEMLIST
END PART
END POLICY
POLICY !!policynamels120
KEYNAME "SYSTEM\CurrentControlSet\Services\Sfloppy"
EXPLAIN !!explaintextls120
PART !!labeltextls120 DROPDOWNLIST REQUIRED
VALUENAME "Start"
ITEMLIST
NAME !!Disabled VALUE NUMERIC 3 DEFAULT
NAME !!Enabled VALUE NUMERIC 4
END ITEMLIST
END PART
END POLICY
END CATEGORY
END CATEGORY
[strings]
category="Custom Policy Settings"
categoryname="Restrict Drives"
policynameusb="Disable USB"
policynamecd="Disable CD-ROM"
policynameflpy="Disable Floppy"
policynamels120="Disable High Capacity Floppy"
explaintextusb="Disables the computers USB ports by disabling the
usbstor.sys driver"
explaintextcd="Disables the computers CD-ROM Drive by disabling the
cdrom.sys driver"
explaintextflpy="Disables the computers Floppy Drive by disabling the
flpydisk.sys driver"
explaintextls120="Disables the computers High Capacity Floppy Drive by
disabling the sfloppy.sys driver"
labeltextusb="Disable USB Ports"
labeltextcd="Disable CD-ROM Drive"
labeltextflpy="Disable Floppy Drive"
labeltextls120="Disable High Capacity Floppy Drive"
Enabled="Enabled"
Disabled="Disabled"
I presume that if I save the text as "Disable Restrict drives.adm and
then import that into default templates, all will be OK.
If not, I do I read the contents of the file on blnk.nu?
thanks
.
- Follow-Ups:
- Re: How to install an ADM file
- From: neo [mvp outlook]
- Re: How to install an ADM file
- Prev by Date: Re: Lock out Group Policy Editor.
- Next by Date: Templates for users
- Previous by thread: GPO to disable user adding Administrative Tools to the Start menu
- Next by thread: Re: How to install an ADM file
- Index(es):
Relevant Pages
|
