locked
How to disable USB data travellers RRS feed

  • Question

  • Dear All,

    I am working in an organization where we have at least 50 network computers. We are facing some severe problems of virus attacks, although professional antivirus are installed i.e. macafee, seymantec on every computer. Most of the computers are attacked from the USBs which the employees either use at home or other places. For the sake of diminishing the virus attacks i want to disable every computer's usb port but this way i can't use the usb mouse or key boards. Is their any way to disable only the usb (data travellers)? I will be glad to find any solution of this dangerous problem?

     

    Best regards,


    Abdul Ghaffar
    Thursday, April 8, 2010 10:23 AM

Answers

  • you can disable USB drive driver installation. Normally this process happens when a usb device plugged-in.

     

    we need to prevent USBSTOR from being installed unless the currently logged on user is allowed to use USB storage. We do that by restricting access to USBSTOR.INF and USBSTORE.PNF in a GPO such that PNP can't automatically install the driver. This is possible because when PNP installs a driver, the installation is performed using the privileges of the currently logged on user. Secondly, we need to make sure that USBSTOR is not started when a USB storage device is plugged in. For that we use Mark's ADM template. The only minor drawback of my solution is that users with access to USB storage need to manually start USBSTOR before connecting USB storage devices.

     

    Here is the detailed steps ..How to disable USB sticks and limit access to USB storage devices


    Thanks Mike --------Please mark as answer if it is useful----------
    • Marked as answer by Aland Li Monday, April 12, 2010 7:15 AM
    Thursday, April 8, 2010 10:45 AM
  •  

    More suitable forum for this question would be one from here :

    http://answers.microsoft.com/hi-in/default%28en-us%29.aspx

     

    and about your problem, take a look at batch file given here ::

    http://www.petri.co.il/forums/showthread.php?t=7177


    Thanks

    "Feel the Force !"
    • Marked as answer by Aland Li Monday, April 12, 2010 7:16 AM
    Thursday, April 8, 2010 2:03 PM

All replies

  • you can disable USB drive driver installation. Normally this process happens when a usb device plugged-in.

     

    we need to prevent USBSTOR from being installed unless the currently logged on user is allowed to use USB storage. We do that by restricting access to USBSTOR.INF and USBSTORE.PNF in a GPO such that PNP can't automatically install the driver. This is possible because when PNP installs a driver, the installation is performed using the privileges of the currently logged on user. Secondly, we need to make sure that USBSTOR is not started when a USB storage device is plugged in. For that we use Mark's ADM template. The only minor drawback of my solution is that users with access to USB storage need to manually start USBSTOR before connecting USB storage devices.

     

    Here is the detailed steps ..How to disable USB sticks and limit access to USB storage devices


    Thanks Mike --------Please mark as answer if it is useful----------
    • Marked as answer by Aland Li Monday, April 12, 2010 7:15 AM
    Thursday, April 8, 2010 10:45 AM
  •  

    More suitable forum for this question would be one from here :

    http://answers.microsoft.com/hi-in/default%28en-us%29.aspx

     

    and about your problem, take a look at batch file given here ::

    http://www.petri.co.il/forums/showthread.php?t=7177


    Thanks

    "Feel the Force !"
    • Marked as answer by Aland Li Monday, April 12, 2010 7:16 AM
    Thursday, April 8, 2010 2:03 PM
  •  

    More suitable forum for this question would be one from here :

    http://answers.microsoft.com/hi-in/default%28en-us%29.aspx

     

    and about your problem, take a look at batch file given here ::

    http://www.petri.co.il/forums/showthread.php?t=7177


    Thanks

    "Feel the Force !"
    Thursday, April 8, 2010 2:04 PM
  • Have you considered simply telling your employees not to use USB drives brought from home?
    Thursday, April 8, 2010 3:36 PM