none
GPO : enable the USB mass Storage and USB DVD drive, for Admin only

    Question

  • Hello,
    Do you know the name(s) of the GPO used to enable the USB Mass Storage (usb key and drive) and also the USB DVD drive (external) ?
    Regards

    Wednesday, February 1, 2017 2:58 PM

All replies

  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsbStor, then in the right pane, find "Start" key, view it's value, (4=Disable USB Drives; 3=Enable USB Drives)

    --

    User Configuration --> Administrative Templates --> System --> Removable Storage Access -->

    "All Removable Storage classes: Deny all access (Not Configured, Enable, Disable)".

    --

    (Reg Entry: HKLM\SYSTEM\CurrentControlSet\Services\USBSTOR = 0)

    --

    Wednesday, February 1, 2017 2:59 PM
  • Hi,
    Is the reply as above share from you? And can I think the problem is fixed? If yes, we appreciate you for the great share, it will be greatly helpful to others who have the same question.
    In addition, as you know the detail registry key, you could directly deploy this registry via group policy, it is the same effect with settings the policy template in the group policy, please see:
    Configure a Registry Item https://technet.microsoft.com/en-us/library/cc753092(v=ws.11).aspx
    Best regards,
    Wendy

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

    Friday, February 3, 2017 7:35 AM
    Moderator
  • The goal is to check the proposal this week...
    Wednesday, February 8, 2017 9:17 AM
  • Hi,
    Ok, if you have any questions, please feel free to contact us. Appreciate for your feedback.
    Best regards,
    Wendy

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

    Monday, February 13, 2017 2:27 AM
    Moderator