Jump to content


Photo
- - - - -

USB ports

Vista

  • Please log in to reply
3 replies to this topic

#1 tajadi

tajadi

    Member

  • Member
  • 2 posts

Posted 11 March 2010 - 08:02 AM

I would like to disable users from using USB ports. How do I go.

#2 DJD

DJD

    God

  • Management
  • 586 posts
  • Gender:Male
  • Location:The Netherlands
  • Interests:Gaming, Technology and driving my Mini.

Posted 11 March 2010 - 08:23 AM

This might be helpful: http://www.tomstrick...-windows-vista/
No shit Sherlock!

#3 Computerpro2

Computerpro2

    Superior Member

  • Management
  • 345 posts
  • Gender:Male
  • Location:Coon Rapids, MN

Posted 11 March 2010 - 09:43 AM

Alternatively, you can create a custom template to use within Group Policy.

First you will need to know create an ADM file, to do this open notepad and copy the following text:

CLASS MACHINE
CATEGORY !!category
CATEGORY !!categoryname
  POLICY !!policynameusb
   KEYNAME "SYSTEM\CurrentControlSet\Services\USBSTOR"
   EXPLAIN !!explaintextusb
	PART !!labeltextusb DROPDOWNLIST REQUIRED

   	VALUENAME "Start"
   	ITEMLIST
    	NAME !!Disabled VALUE NUMERIC 3 DEFAULT
    	NAME !!Enabled VALUE NUMERIC 4
   	END ITEMLIST
	END PART
   END POLICY
END CATEGORY
END CATEGORY

[strings]
category="Custom Policy Settings"
categoryname="Restrict Drives"
policynameusb="Disable USB"
explaintextusb="Disables the computers USB ports by disabling the usbstor.sys driver"

now, once you've copied the above text into notepad, make sure to change the Save as Type: is changed to All Files (*.*) then save it as Disable Devices.adm

next, we will need to open group policy editor, simply click the start button and type "Group Policy" or "Edit Group Policy" in the start menu search box.

Once Group Policy editor is open, expand either the Computer Configuration header or the User Configuration header and right click on "Administrative Templates" and select "Add/Remove Templates" then all we need to do is click "Add" and locate the ADM file we saved previously.

Once you've added the new policy it will show up under "Administrative Templates" (in either Computer Configuration or User Configuration, which ever you choose).

It will look something like this:
Local Group Policy Editor.png

Now all you need to do is double click on "Disable USB" on the right and set it to either Enabled which will disable the usb ports on the system, or Disabled which will enable the usb ports on the system.

Should you need help please let me know and i'll try to explain this as best as possible.
William Johnson - Winxperts Administrator - Xbox Live Gamertag: Computerpro2 - Twitter:@Computerpro2


#4 Karl

Karl

    Missing In Action

  • Management
  • 695 posts
  • Gender:Male
  • Location:Where Tony Can't Get Me

Posted 11 March 2010 - 01:59 PM

Group Policy settings are the best way to go, these allow for it to be set globally domain-wide for each group of users chosen rather than having to do it individually for each User on every workstation. Time saving and ultimately more secure.





Also tagged with one or more of these keywords: Vista

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users