![]() To enable one of these policies, you must create a new subkey in the specified key with the GUID of the device class you want to block access to (column 2).All the above policies correspond to certain registry keys in the HKLM (or HKCU) \SOFTWARE\Policies\Microsoft\Windows\RemovableStorageDevices key (by default this registry key is missing). You can more flexibly control access to external devices by configuring the registry settings that are set by the policies discussed above via the Group Policy Preferences (GPP). ![]() Disable Access to USB Drives via Registry and Group Policy Preferences For this group, set permissions to read and apply the GPO, and leave only read permission for the Authenticated Users or Domain Computers group (by unchecking the Apply group policy checkbox).Īdd users to this AD group who need to block access to flash drives and removable USB disks. Create a security group “Deny USB” and add this group to the security settings of the GPO. There may be another task – you need to allow the use of external USB drives to everyone, except for a certain group of users. In the security settings editor, specify that the Domain Admins group is not allowed to apply this GPO ( Apply group policy – Deny).
0 Comments
Leave a Reply. |
Details
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |