+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Computing (https://hackforums.net/forumdisplay.php?fid=88)
+---- Forum: Microsoft Windows (https://hackforums.net/forumdisplay.php?fid=347)
+---- Thread: Group policies for external USB devices (/showthread.php?tid=5979418)
Group policies for external USB devices - SIM-3257834 - Jun 13, 2019
Anyone here have experience with USB group policies? Had trouble with idiots plug-in cellphones and Bluetooth speakers to some laptops. I rolled out a policy that prevents new USB device drivers to be installed. Seemed to fix the problem since the only way to get the driver installed is with the admin account. Just wanted to know if there was another way to handle this. Keep in mind the only USB device these laptops will ever use is 1 specific external HD.
RE: Group policies for external USB devices - datguy.dev - Jun 13, 2019
For storage devices, there are two policies:
Code
User Configuration -> Policies -> Administrative Templates -> System -> Removable Storage Access.
and
Computer Configuration -> Policies -> Administrative Templates -> System -> Removable Storage Access.Which you can separately deny execute, read, or write access, individually.
RE: Group policies for external USB devices - Bastille - Jun 13, 2019
(Jun 13, 2019 02:04 PM)datguy.dev Wrote: For storage devices, there are two policies:
CodeUser Configuration -> Policies -> Administrative Templates -> System -> Removable Storage Access.
and
Computer Configuration -> Policies -> Administrative Templates -> System -> Removable Storage Access.
Which you can separately deny execute, read, or write access, individually.
Hello there !
Sorry, not fluent in English. Are you actually talking about GPOs ?
RE: Group policies for external USB devices - datguy.dev - Jun 13, 2019
(Jun 13, 2019 02:20 PM)Yseurk Wrote: Hello there !
Sorry, not fluent in English. Are you actually talking about GPOs ?
Try using a translator? If you have questions about GPOs, I'd suggest creating your own thread. But feel free to send me a PM.
RE: Group policies for external USB devices - Bastille - Jun 14, 2019
(Jun 13, 2019 03:20 PM)datguy.dev Wrote: Try using a translator? If you have questions about GPOs, I'd suggest creating your own thread. But feel free to send me a PM.
Didn't ask anything about GPO, but I get my answer
RE: Group policies for external USB devices - Damp - Jun 16, 2019
By the sounds of this just having a GPO that doesn't allow new USB devices would be the best way around this. I guess it really depends on the organization or wherever this is happening. Where I work I have a GPO that just disallows the use of any USB's to prevent people from putting whatever the want onto the PC as multiple users will use each PC daily.