Two resources for disabling USB storage devices

I would like to disable all the USB mass storage devices on the network. However, I still want to grant permission to use the device based upon which group a person is in. The network is a Server 2003 AD, and all the machines are XP SP1. Is there a way to add that functionality through domain/group policy or through a security template? And if so, how?
You can do this in the registry of XP -- Microsoft's HOW TO: Disable the use of USB storage devices in Windows XP outlines how you can do this. I would suspect you could do this via a GPO as well. Also, check out this template for disabling USB that someone wrote to disable these devices via AD. I haven't tested this though, so no guarantees.
This was last published in December 2004

Dig Deeper on Endpoint security management tools



Find more PRO+ content and other member only offers, here.

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.



Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to: