Re: How to install an ADM file

Thanks for the information. You are correct. I am just learning about
group polocies and they can be fun.


On Sun, 12 Mar 2006 07:05:17 -0800, "neo [mvp outlook]"
<neo@xxxxxxxxxxxxxxx> wrote:

The file on bink.nu is not blank/empty. You need to reconfigure the group
policy editor to show you preferences. This is done by highlighting the
administrative templates section and then select View > Filtering and
uncheck the box at the bottom of the dialog.

"David Sherman" <dshermin@xxxxxxxxxxxxx> wrote in message
news:hrc6125sr48de14mdimevnfho87ckq7mra@xxxxxxxxxx
Using this link as the source http://bink.nu/Article4191.bink
I want to create an adm that I could use to disable access to either
USB, floppy or CD.

Simon Geary MVP developed a cool policy template (ADM file) to disable
USB, CD-ROM, Floppy Disk and LS-120 drivers as written in his KB
article 555324

By default, Group Policy does not offer a facility to easily disable
drives containing removable media, such as USB ports, CD-ROM drives,
Floppy Disk drives and high capacity LS-120 floppy drives. However,
Group Policy can be extended to use customised settings by applying an
ADM template. The ADM template in this article allows an Administrator
to disable the respective drivers of these devices, ensuring that they
cannot be used.

Download ADM file from Bink.nu. I have downloaded the ADM file. It is
blank.

If I use the information from here:
http://support.microsoft.com/default.aspx?scid=kb;en-us;555324. This
page shows code of:
CLASS MACHINE
CATEGORY !!category
CATEGORY !!categoryname
POLICY !!policynameusb
KEYNAME "SYSTEM\CurrentControlSet\Services\USBSTOR"
EXPLAIN !!explaintextusb
PART !!labeltextusb DROPDOWNLIST REQUIRED

VALUENAME "Start"
ITEMLIST
NAME !!Disabled VALUE NUMERIC 3 DEFAULT
NAME !!Enabled VALUE NUMERIC 4
END ITEMLIST
END PART
END POLICY
POLICY !!policynamecd
KEYNAME "SYSTEM\CurrentControlSet\Services\Cdrom"
EXPLAIN !!explaintextcd
PART !!labeltextcd DROPDOWNLIST REQUIRED

VALUENAME "Start"
ITEMLIST
NAME !!Disabled VALUE NUMERIC 1 DEFAULT
NAME !!Enabled VALUE NUMERIC 4
END ITEMLIST
END PART
END POLICY
POLICY !!policynameflpy
KEYNAME "SYSTEM\CurrentControlSet\Services\Flpydisk"
EXPLAIN !!explaintextflpy
PART !!labeltextflpy DROPDOWNLIST REQUIRED

VALUENAME "Start"
ITEMLIST
NAME !!Disabled VALUE NUMERIC 3 DEFAULT
NAME !!Enabled VALUE NUMERIC 4
END ITEMLIST
END PART
END POLICY
POLICY !!policynamels120
KEYNAME "SYSTEM\CurrentControlSet\Services\Sfloppy"
EXPLAIN !!explaintextls120
PART !!labeltextls120 DROPDOWNLIST REQUIRED

VALUENAME "Start"
ITEMLIST
NAME !!Disabled VALUE NUMERIC 3 DEFAULT
NAME !!Enabled VALUE NUMERIC 4
END ITEMLIST
END PART
END POLICY
END CATEGORY
END CATEGORY

[strings]
category="Custom Policy Settings"
categoryname="Restrict Drives"
policynameusb="Disable USB"
policynamecd="Disable CD-ROM"
policynameflpy="Disable Floppy"
policynamels120="Disable High Capacity Floppy"
explaintextusb="Disables the computers USB ports by disabling the
usbstor.sys driver"
explaintextcd="Disables the computers CD-ROM Drive by disabling the
cdrom.sys driver"
explaintextflpy="Disables the computers Floppy Drive by disabling the
flpydisk.sys driver"
explaintextls120="Disables the computers High Capacity Floppy Drive by
disabling the sfloppy.sys driver"
labeltextusb="Disable USB Ports"
labeltextcd="Disable CD-ROM Drive"
labeltextflpy="Disable Floppy Drive"
labeltextls120="Disable High Capacity Floppy Drive"
Enabled="Enabled"
Disabled="Disabled"

I presume that if I save the text as "Disable Restrict drives.adm and
then import that into default templates, all will be OK.

If not, I do I read the contents of the file on blnk.nu?

thanks



.

Relevant Pages

  • Re: USB Storage
    ... > ADM template from Simon Geary here, that can do this by disabling the ... POLICY!!policynameusb ... policynamels120="Disable High Capacity Floppy" ... usbstor.sys driver" ...
    (microsoft.public.windows.group_policy)
  • Re: How to install an ADM file
    ... Simon Geary MVP developed a cool policy template to disable ... Floppy Disk drives and high capacity LS-120 floppy drives. ... explaintextcd="Disables the computers CD-ROM Drive by disabling the ...
    (microsoft.public.windows.group_policy)
  • RE: Restrict USB Devices.
    ... POLICY!!policynameusb ... policynamels120="Disable High Capacity Floppy" ... usbstor.sys driver" ... explaintextcd="Disables the computers CD-ROM Drive by disabling the ...
    (microsoft.public.windows.server.active_directory)
  • RE: How to disable all floppy drives on the network
    ... How to disable all floppy drives on the network ... If you can disable the "Floppy Disk" driver through a policy, ... Note that disabling the floppy driver doesn't prevent people from ...
    (Focus-Microsoft)
  • RE: How to disable all floppy drives on the network
    ... How to disable all floppy drives on the network ... If you can disable the "Floppy Disk" driver through a policy, ... Note that disabling the floppy driver doesn't prevent people from sticking ...
    (Focus-Microsoft)