How to deny user use Flashdrive in Domain Controller

mean_pc

How to deny user use Flashdrive in Domain Controller?? THis is in Group Policy. But I don't know how to do..

Find more posts tagged with

Save $250 on 2025 certification boot camps from Infosec!

Book now with code EOY2025

Button

Comments

RTmarc

I don't recall a way to do this in group policy. The only option I can think of is to disable the USB ports on the machine itself (I'm assuming we are talking about USB flash drives) and disallow the users the ability to modify hardware.

royal

You can't do this in Group Policy. This is a new group policy feature in the upcoming Windows Longhorn Server, however.

sprkymrk

No need to wait for Longhorn. You can do this by extending Group Policy with a custom ADM file:
http://support.microsoft.com/kb/555324

Here's an entire article on the subject as well:
http://www.windowsdevcenter.com/pub/a/windows/2005/11/15/disabling-usb-storage-with-group-policy.html

agustinchernitsky

How about the right to mount and unmount file systems or something like that (can't remember the right name)?

I once heard that you can change NTFS rights to the driver (cab file) that holds usb mass storage drivers... that should work.