Disable usb storage in windows 2000

Would you like to learn how to configure a group policy to disable the use of USB storage devices? Network Switch. GPO - Lock the screen after inactivity. GPO - Turn off Wifi if ethernet is connected. GPO - Traffic shaper.

GPO - Map network drive. GPO - Application Locker. GPO - Lock user account after 3 fails. GPO - Add local administrators. GPO - Rename administrator account. GPO - Proxy configuration. GPO - Prevent proxy configuration changes. GPO - Proxy auto-configuration script. GPO - Google Chrome configuration. GPO - Google Chrome proxy configuration.

GPO - Disable the installation of Chrome extensions. GPO - Disable the Chrome password manager. GPO - Mozilla Firefox configuration. GPO - Disable the installation of Firefox extensions. Manage remote endpoints, deploy software and patches with a robust cloud-based Action1 RMM solution. Sign up to Action1 to use RMM tools free forever on up to endpoints. No credit card required. By connecting a USB drive to your computer, any user can infect it with malware or copy important information from it.

This method works in Windows 10 Pro, Enterprise or Education. This method works in all editions of running Windows 10, and it disconnects only USB drives, without affecting the mouse, keyboard, and printer connected via USB. Before editing the registry, it is recommended to create a system restore point. Now, if you connect a USB flash drive to a computer, it will not be displayed anywhere, and in Device Manager you will see an error installing the driver for this device.

Expand USB Controllers. Action1 is a cloud-based remote monitoring and management platform for patch management, software deployment, remote desktop, IT asset inventory , endpoint management. Dec 1, How-to Articles. When a user logs onto the computer for the first time not via the network to access shared folders or printers , Windows creates a user profile.

Sep 23, How-to Articles. UThis tutorial for new users details where to add and remove Windows 10 programs, the quickest way to get to this Control Panel component, and more information on how to properly uninstall Windows 10 programs and applications from your computer. In addition to Microsoft KB I was able to accomplish this task on specific computers in a group in our domain.

Essentially all I did was write a basic script to run a batch file which silently imports the registry values to disable USB storage. That runs as a computer startup script in the GPO.

Then using file system control in the GPO I added the usbstor. Additionally I wanted domain administrators to be able to still use USB drives when they logged in without having to do anything. Once they login, USB storage works Then there is a logoff script that sets it back to disabled using the same bat file that disables it at system startup. I have this working on over computers in one domain. No problems as of yet Hannes, thank you for your.

Hannes, thank you for your care about the issue and sorry for replying as an anonimous. Here are a bit more details. INF and. The registry key is set to "4". Then I login with a user which is not a member of any admin group for sure , plug a USB stick which was on the PC before - everything's perfect, the device is not loaded.

INF and what do I see - it becomes available and the registry key resets to "3". So I can copy files files to the USB stick, though for next restart when the policy will be applied again. Porbably the behavior is on the PCs with particular updates i use WinXP with all the updates, service packs and hotfixes.

PNF accordingly PS. To rollback from the settings I made a batch file which rollbacks the 1st and the 3rd steps. Re: weak solution. You are welcome! Can you elaborate on your claim? Maybe your with your insights we could work around the alleged weakness. The fact that this solution isn't working for some people doesn't necessarily mean that the solution always fails for the reasons you suspect. Weak solution.

Try to connect a different brand and model USB stick and it starts working until the next restart - it is enough to compromise the security puprose. That is why a part of the people here say "it works for me", but another argue that..

Just take an USB stick from your neighboor and copy the company sensitive data to the carrier.. Try setting. If setting Start to 3 doesn't help I don't know what's going on.

System error has occured. I did exactly as instructed to and it appears to be working as far as disabling USB mass storage devices However, when I run "net start usbstor" I get the following error: System error has occured. The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

I've triple checked everything, I am domain admin so I can't see how this would be a rights issue. I've tested on multiple computers, same result.

Any help is greatly appreciated.. We're so close :. Re: question. So to "undo" the effect of a GPO, you need to invert the GPO, wait until it is applied to all computers, then remove it or move it to the OU and then invert it again. By "inverting" I mean switching the settings in the GPO to their opposite values. When the GPO is applied after the first inversion, the security and registry settings of all computers will be reverted to their original, permissive values. After the second inversion and moving the GPO to the OU, the restrictive settings will be applied, but this time only to the computers in the OU.

I can't go into the details how to invert the settings described in this article but here are a few hints. The number in the. For me it worked from 1st try on whole domain. But than my admin asked from me to move it from whole domain to OU where only computers and some servers are located.

From that that moment I am not able to start usb even with privleges. When I type net start usbstor i get message - System error has occured The service cannot be started I have even moved policy on whole domain like it was 1st time that worked, but still I get same error message when I type command.

Any help please. Want script. So what I want to do is. True your instruction can edit the registry. But if organizations have computers how we do that. So anybody can help me to write down script that one and please explain me how to do. Thank you. That is very urgent if anyone can reply immediately. Dont worry it will work. Users don't need to execute. You can add "net start usbstor" to a.

It will silently fail for users that don't have permission to start the service, and work for users that do. I'm doing this on my network and it works wonderfully. Use a startup script. Shekar shekarrays gmail. Thnx in adv, Sridhar. Re: Re: How to give usage only to one device. Pretty much. The second USB could not install and so not work, while the first one was working fine. USB Keyboard and mouse. Try the following registry entry which allow only Read access to user.

User can not copy the data from machin to any portable usb disk. Re: How to give usage only to one device. Thanks for suggesting that method. Are you positive that it really only allows one type of USB device and not the entire class of devices supported by a driver? How to give usage only to one device. To give usage to only one device i use this way. Fist you uninstall every device installed previously if there are.