How to deny user use Flashdrive in Domain Controller
mean_pc
Member Posts: 4 ■□□□□□□□□□
How to deny user use Flashdrive in Domain Controller?? THis is in Group Policy. But I don't know how to do..
Comments
-
RTmarc
Member Posts: 1,082 ■■■□□□□□□□
I don't recall a way to do this in group policy. The only option I can think of is to disable the USB ports on the machine itself (I'm assuming we are talking about USB flash drives) and disallow the users the ability to modify hardware.
-
royal
Member Posts: 3,352 ■■■■□□□□□□
You can't do this in Group Policy. This is a new group policy feature in the upcoming Windows Longhorn Server, however.“For success, attitude is equally as important as ability.” - Harry F. Banks -
sprkymrk
Member Posts: 4,884 ■■■□□□□□□□
No need to wait for Longhorn. You can do this by extending Group Policy with a custom ADM file:
http://support.microsoft.com/kb/555324
Here's an entire article on the subject as well:
http://www.windowsdevcenter.com/pub/a/windows/2005/11/15/disabling-usb-storage-with-group-policy.htmlAll things are possible, only believe. -
agustinchernitsky
Member Posts: 299
How about the right to mount and unmount file systems or something like that (can't remember the right name)?
I once heard that you can change NTFS rights to the driver (cab file) that holds usb mass storage drivers... that should work.