none
USB Block 2012 policy error

    Question

  • I have deployed USB Block Policy through 2012 group policy for user. USB blocking happen. But when i remove the link. Still the user was not be able to access to USB Drive. Tried with update /force command on both DC and Client machine. Device manager showing exclamation mark on USB Storage.
    Tuesday, November 19, 2013 2:59 PM

Answers

All replies

  • Check the RSOP on the client machine and make sure the group policy setting for USB block  is not found there. Restart the client machine once...

    Prajwal Desai, http://prajwaldesai.com

    Tuesday, November 19, 2013 3:06 PM
  • On client machine run the RSOP also. Restart the machine also. We need to remove the device from the device manager and reinstall it. And this become manual task
    Tuesday, November 19, 2013 3:19 PM
  • create another policy to enable USB.
    Tuesday, November 19, 2013 5:34 PM
  • Hi,

    Thanks for posting in the forum.

    Since USB devices are still blocked after removing the policy, I suggest you could first check if the registry key DWORD value "Start" is 4 in the following path:

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR

    If so, please to change it to 3 via GPP. For details, please refer to the following similar thread.

    USB Block Policy

    http://social.technet.microsoft.com/Forums/en-US/9bb1e02e-85a0-4985-8873-22c0bfaaba89/usb-block-policy?forum=winserverGP

    For details about GPP Registry item, please refer to the following article.

    Registry Extension

    http://technet.microsoft.com/en-us/library/cc771589.aspx

    Hope this helps.

    Best Regards,

    Andy Qi

    TechNet Subscriber Support

    If you are TechNet Subscription user and have any feedback on our support quality, please send your feedback here.


    Andy Qi
    TechNet Community Support

    Wednesday, November 20, 2013 3:16 AM
    Moderator
  • I have deployed USB Block Policy through 2012 group policy for user. USB blocking happen. But when i remove the link. Still the user was not be able to access to USB Drive. Tried with update /force command on both DC and Client machine. Device manager showing exclamation mark on USB Storage


    Then i have to remove the device driver from Device manager and reinstall it,

    Saturday, November 23, 2013 2:10 PM
  • When you delete the policy you must first do a gpupdate on domain controller and then on client machine. If the device  manager is showing exclamation mark then try to update the driver, this should fix the issue.

    Prajwal Desai, http://prajwaldesai.com

    Wednesday, November 27, 2013 5:37 AM