none
USB& CD working after configured the GPO

    Question

  • Hi Team,

    I have  AD windows 2008 R2 Server, i configured USB & CD block in the new GPO. However both devices is still working on clients after the configuration. Pls help.

    Thursday, February 5, 2015 10:45 AM

All replies

  • What settings are you using, and please verify using rsop that thoes settings actually apply. If you use the 'buildin' rsm restrictions I think they only apply to ntfs media.

    So, maybe try this

    http://blogs.technet.com/b/danstolts/archive/2009/01/21/disable-adding-usb-drive-and-memory-sticks-via-group-policy-and-group-policy-preferences.aspx

    and http://support.microsoft.com/kb/555324


    Best Regards,

    Jesper Vindum, Denmark

    Systems Administrator

    Help the forum: Monitor(alert) your threads and vote helpful replies or mark them as answer, if it helps solving your problem.

    Thursday, February 5, 2015 11:19 AM
  • I used the settings under User Configuration-Policies-Administrative Templates-System-Removable Storage. will it work?
    Thursday, February 5, 2015 12:27 PM
  • And also pls guide me to block DVD Drive also..
    Thursday, February 5, 2015 12:30 PM
  • Hi,

    You can new a GPO configure it as:

    Computer Configuration > Policies > Administrative Templates > System > Removable Storage Access - Deny all Access

    Also, you can check the below link for more details.

    http://prajwaldesai.com/how-to-disable-usb-devices-using-group-policy/

    If you have any questions, feel free to post us.

    Best Regards,

    Elaine


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Friday, February 6, 2015 9:41 AM
    Moderator
  • Can you please confirm whether or not your rms' are formatted with fat32 or ntfs..

    Best Regards,

    Jesper Vindum, Denmark

    Systems Administrator

    Help the forum: Monitor(alert) your threads and vote helpful replies or mark them as answer, if it helps solving your problem.

    Saturday, February 7, 2015 6:50 PM
  • Hi All,

    I configured CD & USB Block in registry Via GPO. But for some user if i do delegation on this GPO still not able to access the drives.

    Sunday, February 8, 2015 6:19 AM
  • Hi,

    Do you want to block the removable storage for all the accounts who logged in the computer or just normal users without admin rights?

    And also would you please let's know how you configured the security filtering?

    Looking forward to your reply.

    Best Regards,

    Elaine


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Wednesday, February 11, 2015 9:15 AM
    Moderator