Anyone here have experience with USB group policies? Had trouble with idiots plug-in cellphones and Bluetooth speakers to some laptops. I rolled out a policy that prevents new USB device drivers to be installed. Seemed to fix the problem since the only way to get the driver installed is with the admin account. Just wanted to know if there was another way to handle this. Keep in mind the only USB device these laptops will ever use is 1 specific external HD.
Group policies for external USB devices |
For storage devices, there are two policies:
Code User Configuration -> Policies -> Administrative Templates -> System -> Removable Storage Access.Which you can separately deny execute, read, or write access, individually. 
Jun 13, 2019 02:20 PM
(This post was last modified: Jun 13, 2019 02:20 PM by Bastille.)
(Jun 13, 2019 02:04 PM)datguy.dev Wrote: For storage devices, there are two policies: Hello there ! Sorry, not fluent in English. Are you actually talking about GPOs ? (Jun 13, 2019 02:20 PM)Bastille Wrote: Hello there ! Try using a translator? If you have questions about GPOs, I'd suggest creating your own thread. But feel free to send me a PM.
Jun 14, 2019 11:48 AM
(This post was last modified: Jun 14, 2019 11:48 AM by Bastille.)
(Jun 13, 2019 03:20 PM)datguy.dev Wrote: Try using a translator? If you have questions about GPOs, I'd suggest creating your own thread. But feel free to send me a PM. Didn't ask anything about GPO, but I get my answer 
By the sounds of this just having a GPO that doesn't allow new USB devices would be the best way around this. I guess it really depends on the organization or wherever this is happening. Where I work I have a GPO that just disallows the use of any USB's to prevent people from putting whatever the want onto the PC as multiple users will use each PC daily.
SELLING SIG SPACE FEEL FREE TO PM ME ABOUT IT |
|
|
