Global Policy to disable FDD & USB not working
- From: "shoeb" <shoeb@xxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Mon, 9 May 2005 02:17:21 -0700
below is the adm template i have created to disable Floppy & USB to few users
on the network.
I have created three security group Disable_FDD (where all users floppy
Drive is disabled), Disable_All (where USB & Floppy is disabled),
Disable_NONE(This group has everything enabled).
right clicking the Active directory ----> properties---->group policy---> i
created 2 policy Kill_floppy & Kill_All.
Then I
1) Right clicked the Kill_floppy policy and choose "Security"
2) Remove the check at "Authenticated Users"
3) "Add" the two new Disable_FDD, Disable_NONE Groups
4) Check "Apply" for Disable_FDD
5) Check "Deny" for Disable_NONE
Similarly i did for the Kill_All policy.
1) Right clicked the Kill_ALL policy and choose "Security"
2) Remove the check at "Authenticated Users"
3) "Add" the two new Disable_ALL, Disable_NONE Groups
4) Check "Apply" for Disable_ALL
5) Check "Deny" for Disable_NONE
In each Policy I imported the respective adm file
After this at the user end. the floppy and USB are not getting disabled,
unless i tick the allow policy option for authenticated users. In this way
all the users are applied with the policy and i could not control the group
of users.
Secondly i have to restart the window twice before the policy is applied.
please help me in this
regards
shoeb
------------------------------------------------
KILL FLOPPY
------------------------------------------------
CLASS MACHINE
CATEGORY !!categoryname
POLICY !!policyname
KEYNAME "SYSTEM\CurrentControlSet\Services\Flpydisk"
EXPLAIN !!explaintext
PART !!labeltext DROPDOWNLIST REQUIRED
VALUENAME "Start"
ITEMLIST
NAME !!Disabled VALUE NUMERIC 3 DEFAULT
NAME !!Enabled VALUE NUMERIC 4
END ITEMLIST
END PART
END POLICY
END CATEGORY
[strings]
categoryname="Restrict Drives"
policyname="Disable the Floppy Drive"
explaintext="Disables the computers Floppy Drive completely"
labeltext="Disable Floppy Drive"
Enabled="Enabled"
Disabled="Disabled"
---------------------------------------------------------------
KILL USB
---------------------------------------------------------------
CLASS MACHINE
CATEGORY !!categoryname
POLICY !!policyname
KEYNAME "SYSTEM\CurrentControlSet\Services\USBSTOR"
EXPLAIN !!explaintext
PART !!labeltext DROPDOWNLIST REQUIRED
VALUENAME "Start"
ITEMLIST
NAME !!Disabled VALUE NUMERIC 3 DEFAULT
NAME !!Enabled VALUE NUMERIC 4
END ITEMLIST
END PART
END POLICY
END CATEGORY
[strings]
categoryname="Restrict Drives"
policyname="Disable the USB Drive"
explaintext="Disables the computers USB Drive completely"
labeltext="Disable USB Drive"
Enabled="Enabled"
Disabled="Disabled"
.
- Prev by Date: Re: NT Domain Rename and Upgrade to Serer 2003
- Next by Date: RE: guid
- Previous by thread: Domain Users in ADAM group
- Next by thread: ping ??
- Index(es):
Relevant Pages
|
