1

I want to disable the USB for Windows 7 clients through the Active Directory group policy ,is it possible ???and anyone can give me instructions please .

Greg Askew
  • 35,880
  • 5
  • 54
  • 82
Hussein Alkahli
  • 63
  • 4

2 Answers2

3

Using Group Policy Management Console (Windows 2008/Windows7 RSAT):

User or Computer policy

Administrative Templates > Removable Storage

You can either set both policies for "Removable Disks..." or "All Removable Storage classes: Deny all access"

If you want to ensure it is disable for local account access, it should be a computer policy.

enter image description here

Greg Askew
  • 35,880
  • 5
  • 54
  • 82
  • My server is 2003 any other solutions – Hussein Alkahli Jan 31 '16 at 15:27
  • Run GPMC from a Windows 7 workstation with Remote Server Administration Tools. – Greg Askew Jan 31 '16 at 15:29
  • Do you mean that when I install it I will be able to apply the policy from my windows 7 as I am login as domain administrator and any changes will applies in all users ?? .. can you explain more please. – Hussein Alkahli Jan 31 '16 at 15:50
  • Yes, you can edit the group policies from a Windows 7 computer with the Remote Server Administration Tools installed, and the policy will apply to all users/computers. It doesn't matter what computer you run GPMC from. – Greg Askew Jan 31 '16 at 15:54
  • Do I have to install CSE for new group policy preference in the windows 2003 server first???? – Hussein Alkahli Jan 31 '16 at 17:18
  • No, that would only be if you had Windows XP clients, and only if this setting used Group Policy Preferences (it doesn't). – Greg Askew Jan 31 '16 at 19:18
  • From my test you need it, and its wrote in the KB, it give the extension, but does not give the gpmc extension to edit them. (thus the need for rsat on another computer). – yagmoth555 Jan 31 '16 at 20:01
1

For usb stick; - The CSE for new group policy preference must be installed on your server

  • Install RSAT on a windows 7 computer

  • From there you will be able to use a GPP to achieve your goal. Open GPMC, User configuration, policy, administrative template, system, removable storage media, enable/disable

For anything else, disregard my answer, as I think you need a third part software to achieve your goal

yagmoth555
  • 16,758
  • 4
  • 29
  • 50