Disable USB Storage for Certain Users

Forums › IT Pro and developers › Disable USB Storage for Certain Users

SparkyNZL

2 posts

Wannabe Geek

#39308 12-Aug-2009 14:49

I spent about three hours now searching the web for a way to do this, but does anyone know of a way to disable USB Stroage devices for certain users via Group policy or a login script.
NOTE: we dont want to disable USB for some users on the same PC's.

xpd

Geek @ Coastguard NZ
13765 posts

Uber Geek

Retired Mod

ID Verified

Trusted

Lifetime subscriber

#245653 12-Aug-2009 15:44

Funny you ask.... weve been looking at Microsoft Steady State for our student PCs and found it can disable drives for certain users :)
Dont know if it supports it via Active Directory though...... we just want to use it for the re-image purpose :)

Gavin / xpd / FastRaccoon / Geek of Coastguard New Zealand

LinkTree

CB_24

366 posts

Ultimate Geek

#245671 12-Aug-2009 16:07

Steadystate works well, I built images for a library to use, you can fully disable USB access for certains groups/users

Kraven

729 posts

Ultimate Geek

#245675 12-Aug-2009 16:10

Maybe a combination of Disable USB Disks with GPO with Loopback processing of Group Policy.

I haven't attempted this, but it might provide some useful pointers.

zimbonz

96 posts

Master Geek

#246158 13-Aug-2009 17:34

I have used the above, and it works well. I apply to GPO to certain users, so that I can login as admin anytime and use whatever I need.

ANglEAUT

2320 posts

Uber Geek

Trusted

Lifetime subscriber

#248387 18-Aug-2009 22:11

Hi.
My work PC has got LockDrives.exe from MS installed that does the same for floppy / CD / USB disk based on group membership.

Both LockDrives & SteadyState have got .adm files to manage via GPO.

Please keep this GZ community vibrant by contributing in a constructive & respectful manner.