Disable USB Storage for Certain Users

Forums › IT Pro and developers › Disable USB Storage for Certain Users

SparkyNZL

2 posts

Wannabe Geek

#39308 12-Aug-2009 14:49

I spent about three hours now searching the web for a way to do this, but does anyone know of a way to disable USB Stroage devices for certain users via Group policy or a login script.
NOTE: we dont want to disable USB for some users on the same PC's.

xpd

Geek of Coastguard
14115 posts

Uber Geek
+1 received by user: 4574

Retired Mod

ID Verified

Trusted

Lifetime subscriber

#245653 12-Aug-2009 15:44

Funny you ask.... weve been looking at Microsoft Steady State for our student PCs and found it can disable drives for certain users :)
Dont know if it supports it via Active Directory though...... we just want to use it for the re-image purpose :)

XPD / Gavin

LinkTree

CB_24

371 posts

Ultimate Geek
+1 received by user: 33

#245671 12-Aug-2009 16:07

Steadystate works well, I built images for a library to use, you can fully disable USB access for certains groups/users

Kraven

738 posts

Ultimate Geek
+1 received by user: 190

#245675 12-Aug-2009 16:10

Maybe a combination of Disable USB Disks with GPO with Loopback processing of Group Policy.

I haven't attempted this, but it might provide some useful pointers.

zimbonz

96 posts

Master Geek
+1 received by user: 1

#246158 13-Aug-2009 17:34

I have used the above, and it works well. I apply to GPO to certain users, so that I can login as admin anytime and use whatever I need.

ANglEAUT

altered-ego
2436 posts

Uber Geek
+1 received by user: 841

Trusted

Lifetime subscriber

#248387 18-Aug-2009 22:11

Hi.
My work PC has got LockDrives.exe from MS installed that does the same for floppy / CD / USB disk based on group membership.

Both LockDrives & SteadyState have got .adm files to manage via GPO.

Please keep this GZ community vibrant by contributing in a constructive & respectful manner.