Thursday, September 12, 2019

BLOCK USB VIA GPO

How to disable USB devices using Group Policy

In this post we have a domain controller running on Windows Server 2012 R2 Datacenter edition and a client that is a part of domain running Windows 7 Professional SP1 edition. The group policy to disable USB devices will be created on domain controller and we will be applying it on a OU containing the computer account WIN7.
How to disable USB devices using Group Policy
Launch the Group Policy Management tool on the domain controller, right click Group Policy Objects, click New. Provide a name to the GPO and click OK. In this example I have named the group policy as Block USB Devices.
How to disable USB devices using Group Policy
Right click the policy and click Edit.  This will open Group Policy Management Editor. Navigate to Computer ConfigurationPoliciesAdministrative TemplatesSystemRemovable Storage Access. This is the place where you find settings for Removable Storage Access devices. There are lot of USB settings for multiple devices, however we will configure a setting All Removable Storage classes: Deny all access.
How to disable USB drives using Group Policy
Right click on the setting All Removable Storage classes: Deny all access and click Edit. If you enable this policy then it will block access to any removable storage class that you connect to the computer. Click Enabled and click Apply and then OK.
How to disable USB drives using Group Policy
So far we have created a group policy object, the next step is to link the GPO to the OU containing the computer accounts for which the USB devices are to be blocked. Right click on the OU and click Link an Existing GPO.
How to disable USB drives using Group Policy
From the list of GPO’s select the policy Block USB Devices and click OK.
How to disable USB drives using Group Policy
Perform a group policy update on the client using the command gpupdate /force. Connect any USB device to the computer and you should see the message as Access is denied. The policy that we applied will prevent users from mounting any class of removable media.

No comments:

Post a Comment

Jika Blog ini bermanfaat untuk anda. Silakan Tinggalkan Komentar Anda

Download Kalender 2021 Masehi / 1442 Hijriyah

Sumber artikel :  https://pintardesain.com/download-kalender-2021/ Download Kalender 2021 Masehi / 1442 Hijriyah File CorelDraw. Lengkap 12 ...