RE: Restrict USB Devices.
- From: Irv <Irv@xxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Fri, 4 Aug 2006 06:45:01 -0700
I'm surprised the printer is using the usbstor.sys and not the usbhub.sys.
Does the printer have a hard disk or some sort of storage media? I must admit
I didn't test with USB printers.
In the end if the printer is using this driver then you wil have to either
do security filtering on the GPO so that users who have a USB printer are not
affected (and they can use USB devices) or look for another way
Good luck
Irv
"Kiran Kumar" wrote:
Thanks irv, it works..
But the USB port is disabled i cant have a usb printer attached, cant i
have something which can only disable usb thumb drives or usb storage devices
and not the usb printers.
Regards
--
All is well when u''''r mind is well
"Irv" wrote:
I found this on the web when I was asked to do the same thing. Copy the text
below into a .adm file and import into your GPO. It also has options to
disable floppy and CD
-----------------------------------------
CLASS MACHINE
CATEGORY !!category
CATEGORY !!categoryname
POLICY !!policynameusb
KEYNAME "SYSTEM\CurrentControlSet\Services\USBSTOR"
EXPLAIN !!explaintextusb
PART !!labeltextusb DROPDOWNLIST REQUIRED
VALUENAME "Start"
ITEMLIST
NAME !!Disabled VALUE NUMERIC 3 DEFAULT
NAME !!Enabled VALUE NUMERIC 4
END ITEMLIST
END PART
END POLICY
POLICY !!policynamecd
KEYNAME "SYSTEM\CurrentControlSet\Services\Cdrom"
EXPLAIN !!explaintextcd
PART !!labeltextcd DROPDOWNLIST REQUIRED
VALUENAME "Start"
ITEMLIST
NAME !!Disabled VALUE NUMERIC 1 DEFAULT
NAME !!Enabled VALUE NUMERIC 4
END ITEMLIST
END PART
END POLICY
POLICY !!policynameflpy
KEYNAME "SYSTEM\CurrentControlSet\Services\Flpydisk"
EXPLAIN !!explaintextflpy
PART !!labeltextflpy DROPDOWNLIST REQUIRED
VALUENAME "Start"
ITEMLIST
NAME !!Disabled VALUE NUMERIC 3 DEFAULT
NAME !!Enabled VALUE NUMERIC 4
END ITEMLIST
END PART
END POLICY
POLICY !!policynamels120
KEYNAME "SYSTEM\CurrentControlSet\Services\Sfloppy"
EXPLAIN !!explaintextls120
PART !!labeltextls120 DROPDOWNLIST REQUIRED
VALUENAME "Start"
ITEMLIST
NAME !!Disabled VALUE NUMERIC 3 DEFAULT
NAME !!Enabled VALUE NUMERIC 4
END ITEMLIST
END PART
END POLICY
END CATEGORY
END CATEGORY
[strings]
category="Custom Policy Settings"
categoryname="Restrict Drives"
policynameusb="Disable USB"
policynamecd="Disable CD-ROM"
policynameflpy="Disable Floppy"
policynamels120="Disable High Capacity Floppy"
explaintextusb="Disables the computers USB ports by disabling the
usbstor.sys driver"
explaintextcd="Disables the computers CD-ROM Drive by disabling the
cdrom.sys driver"
explaintextflpy="Disables the computers Floppy Drive by disabling the
flpydisk.sys driver"
explaintextls120="Disables the computers High Capacity Floppy Drive by
disabling the sfloppy.sys driver"
labeltextusb="Disable USB Ports"
labeltextcd="Disable CD-ROM Drive"
labeltextflpy="Disable Floppy Drive"
labeltextls120="Disable High Capacity Floppy Drive"
Enabled="Enabled"
Disabled="Disabled"
---------------------------
HTH
Irv
"Kiran Kumar" wrote:
Hi,
I would like restrict USB Drives on all clients, I know that there are some
third party tools which do this. But i would like to do it with AD. Any ideas.
Regards
--
All is well when u''''r mind is well
- Follow-Ups:
- RE: Restrict USB Devices.
- From: Kiran Kumar
- RE: Restrict USB Devices.
- References:
- RE: Restrict USB Devices.
- From: Irv
- RE: Restrict USB Devices.
- From: Kiran Kumar
- RE: Restrict USB Devices.
- Prev by Date: Folder redirection skip .mp3 .wma .avi ,etc
- Next by Date: Re: Help needed to remove crashed replica from AD
- Previous by thread: RE: Restrict USB Devices.
- Next by thread: RE: Restrict USB Devices.
- Index(es):
Relevant Pages
|
