none
usb block group policy

    Question

  • Dear team,

    we facing issue policy deploy usb block in win 2008r2 i want block all usb devices gpo through but policy not reflect.

    please check below snaps and suggest what need to do where i do mistake and what need to do...

     

    Wednesday, December 16, 2015 5:18 AM

Answers

  • block all usb devices gpo through but policy not reflect.

    You mean the "Block Usb" GPO is not listed under "Applied Group Policy Objects" section of COMPUTER SETTINGS in the result? What do you have in the "Block Usb" Organization Unit?
     
    "Prevent installation of devices that match any of these device IDs" policy setting is a computer setting, make sure that you linked it to an Organization Unit containg the desired Computer object.
     
    Also, for the "Error: Access Denied" error message when you run the Ggpresult /h, please refer to this KB article for more details:
     
    https://support.microsoft.com/en-us/kb/322852
     
    Hope this helps.
     

    Regards,

    Ethan Hua


    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com

    Thursday, December 17, 2015 5:06 AM
    Moderator

All replies

  • clent side troubleshoot policy not assign see below and suggest what we do now.

    Wednesday, December 16, 2015 5:19 AM
  • after run below command we got below result please suggest


    C:\Users\chetan.soni>gpresult /r /user:infra\chetan.soni

    Microsoft (R) Windows (R) Operating System Group Policy Result tool v2.0
    Copyright (C) Microsoft Corp. 1981-2001

    Created On 16-12-2015 at 11:25:49


    RSOP data for INFRA\Chetan.Soni on PRADHAP : Logging Mode
    ----------------------------------------------------------

    OS Configuration:            Member Workstation
    OS Version:                  6.1.7600
    Site Name:                   Default-First-Site-Name
    Roaming Profile:             N/A
    Local Profile:               C:\Users\chetan.soni
    Connected over a slow link?: No


    COMPUTER SETTINGS
    ------------------
        CN=PRADHAP,CN=Computers,DC=utility,DC=esselgroup,DC=com
        Last time Group Policy was applied: 16-12-2015 at 11:12:25
        Group Policy was applied from:      UTPDC.utility.esselgroup.com
        Group Policy slow link threshold:   500 kbps
        Domain Name:                        UTILITY
        Domain Type:                        Windows 2000

        Applied Group Policy Objects
        -----------------------------
            Default Domain Policy
            IM
            PC-to-PC Video OFF
            Logon Disclaimer
            Login Audit

        The following GPOs were not applied because they were filtered out
        -------------------------------------------------------------------
            Network Seeting Disabled
                Filtering:  Not Applied (Empty)

            X drive consumer service sagar
                Filtering:  Not Applied (Empty)

            Sagar Y drive
                Filtering:  Not Applied (Empty)

            Utility Wallpaper
                Filtering:  Not Applied (Empty)

            Y drive
                Filtering:  Not Applied (Empty)

            Local Group Policy
                Filtering:  Not Applied (Empty)

            X Drive
                Filtering:  Not Applied (Empty)

            X drive HR sagar
                Filtering:  Not Applied (Empty)

            AssetExplorerAgent
                Filtering:  Not Applied (Empty)

        The computer is a part of the following security groups
        -------------------------------------------------------
            BUILTIN\Administrators
            Everyone
            BUILTIN\Users
            NT AUTHORITY\NETWORK
            NT AUTHORITY\Authenticated Users
            This Organization
            PRADHAP$
            Domain Computers
            System Mandatory Level


    USER SETTINGS
    --------------
        CN=Chetan Soni,OU=Block USb,DC=infra,DC=esselgroup,DC=com
        Last time Group Policy was applied: 16-12-2015 at 11:08:50
        Group Policy was applied from:      INPDC.infra.esselgroup.com
        Group Policy slow link threshold:   500 kbps
        Domain Name:                        INFRA
        Domain Type:                        Windows 2000

        Applied Group Policy Objects
        -----------------------------
            Default Domain Policy
            PC-to-PC Video OFF
            AssetExplorerAgent
            Infra Wallpaper

        The following GPOs were not applied because they were filtered out
        -------------------------------------------------------------------
            Logon Disclaimer
                Filtering:  Not Applied (Empty)

            Block Usb
                Filtering:  Not Applied (Empty)

            Local Group Policy
                Filtering:  Not Applied (Empty)

        The user is a part of the following security groups
        ---------------------------------------------------
            Domain Users
            Everyone
            BUILTIN\Users
            NT AUTHORITY\INTERACTIVE
            CONSOLE LOGON
            NT AUTHORITY\Authenticated Users
            This Organization
            LOCAL
            Enterprise Admins
            VPN_Users
            ESSEL_admin_GRP
            Denied RODC Password Replication Group
            Medium Mandatory Level

    C:\Users\chetan.soni>




















    Wednesday, December 16, 2015 6:00 AM
  • please suggest 
    Wednesday, December 16, 2015 8:50 AM
  • > we facing issue policy deploy usb block in win 2008r2 i want block all
    > usb devices gpo through but policy not reflect.
     
    Does not work on Server SKUs, only on clients.
     
    Wednesday, December 16, 2015 11:55 AM
  • does not work on server skus..only on clients?

    means? 

    Wednesday, December 16, 2015 1:13 PM
  • > does not work on server skus..only on clients?
    > means?
     
    You cannot block USB through GPO on a Server edition of Windows. SKU =
    Stock Keeping Unit.
     
    Wednesday, December 16, 2015 3:45 PM
  • block all usb devices gpo through but policy not reflect.

    You mean the "Block Usb" GPO is not listed under "Applied Group Policy Objects" section of COMPUTER SETTINGS in the result? What do you have in the "Block Usb" Organization Unit?
     
    "Prevent installation of devices that match any of these device IDs" policy setting is a computer setting, make sure that you linked it to an Organization Unit containg the desired Computer object.
     
    Also, for the "Error: Access Denied" error message when you run the Ggpresult /h, please refer to this KB article for more details:
     
    https://support.microsoft.com/en-us/kb/322852
     
    Hope this helps.
     

    Regards,

    Ethan Hua


    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com

    Thursday, December 17, 2015 5:06 AM
    Moderator