Windows XP restrict USB Active directory GPO way

Asked By Lockey Tracey 0 points N/A Posted on - 12/22/2011

Hi All,

Windows XP restrict USB Active directory GPO way

I have 500+ machines which needs USB restriction.

How can i do this via GPO. Where is this option?

Thank you in advance

• Status: Open
• Question Views: 1159
• Answer Count: 1
• Vote Up 0 Vote Down

• Answer Accepted: No
• Question Category: Active Directory

Answered By Expert Advanced 0 points N/A #170120

Windows XP restrict USB Active directory GPO way

 

Microsoft systems use two file systems to install and access the USB drive: Usbstor.pnf and Usbstor.inf. So to restrict access to the USB drive, you need to deploy a Group Policy Object GPO that will prevent your client systems (Windows XP) to access the two previous files.

 

Solution:

• Open your Group policy Object editor.
• Select the Organization Unit OU that contains your workstations, right click creates a new GPO and links it here.

• We will edit the Computer Configuration, so, you need to navigate to File system under security setting under windows settings under policies.
• Right click and choose 'add file', browse to c:Windowsinfusbstor.inf press OK.

• Add your user group to the security tab then selects 'deny' for Full control.
• Repeat the same steps for the other file: C:WindowsInfUsbstor.pnf.
• Click start > run > gpupdate /force /target:computer.

I hope I was helpful

About Expert Advanced

Questions
3

Answers
3

Best Answers
0

• Vote Up 0 Vote Down

• Posted on - 12/23/2011
• Question Category: Active Directory