Group Policy for USB access

sobeitjedi · 12-22-2008, 11:14 AM

Hi.

I have a Windows 2003 server environment, with XP SP3 PC's.

I wish for all users to be denied access to USB. But, some users will always have access to USB devices and others will be given temporary access to USB devices.

How can I achieve this? Preferably within Group Policy.

**XtabbedoutX** · 12-23-2008, 12:17 PM

http://www.protect-me.com/dl/

http://www.pcworld.com/news/article/0,aid,122140,00.asp

Also SP2 now allows an administrator to prevent USB storage devices from attaching to the system. In some situations this should increase the security when somebody has direct access to a box.
Systems by default will allow USB storage devices to connect without problems. This allows an easy pathway for a user to download or upload large files from the system. In some environments, this is helpful; other times it can be a security nightmare.

Here's the registry key to turn it off.

If you don't have this key, you might need to create it.

Location:
HKEY_LOCAL_MACHINE\System\
CurrentControlSet\Control\StorageDevicePolicies

Setting name:
WriteProtect

Dword values:
0 (is the default and allows USB devices to connect)
1 (prevents USB devices from connecting)

Tulips · 01-04-2009, 03:49 PM

How to do the same in XP machines...o cant find storagedevice policy under control....

12-22-2008, 11:14 AM	#1 (permalink)
sobeitjedi Registered User Join Date: Sep 2007 Posts: 43 OS: Windows Server 2003	Group Policy for USB access Hi. I have a Windows 2003 server environment, with XP SP3 PC's. I wish for all users to be denied access to USB. But, some users will always have access to USB devices and others will be given temporary access to USB devices. How can I achieve this? Preferably within Group Policy.

12-23-2008, 12:17 PM	#2 (permalink)
XtabbedoutX TSF Enthusiast Join Date: Sep 2007 Location: Oklahoma City Posts: 1,189 OS: Server 2K3 R2 SP 2, Server 2K SP4, XP PRO SP 3, Mac OS X 10.5, iPhone My System	Re: Group Policy for USB access http://www.protect-me.com/dl/ http://www.pcworld.com/news/article/0,aid,122140,00.asp Also SP2 now allows an administrator to prevent USB storage devices from attaching to the system. In some situations this should increase the security when somebody has direct access to a box. Systems by default will allow USB storage devices to connect without problems. This allows an easy pathway for a user to download or upload large files from the system. In some environments, this is helpful; other times it can be a security nightmare. Here's the registry key to turn it off. If you don't have this key, you might need to create it. Location: HKEY_LOCAL_MACHINE\System\ CurrentControlSet\Control\StorageDevicePolicies Setting name: WriteProtect Dword values: 0 (is the default and allows USB devices to connect) 1 (prevents USB devices from connecting)

01-04-2009, 03:49 PM	#3 (permalink)
Tulips Registered User Join Date: Dec 2008 Posts: 7 OS: XP	Re: Group Policy for USB access How to do the same in XP machines...o cant find storagedevice policy under control....