How To Disable USB Drive Use In An Active Directory Domain
In this post we have a domain controller running on Windows Server 2012 R2 Datacenter edition and a client that is a part of domain running Windows 7 Professional SP1 edition. The group policy to disable USB devices will be created on domain controller and we will be applying it on a OU containing the computer account WIN7.
Simon's work is typical of many others in the Microsoft MVP program , which recognizes outstanding individuals who contribute their time and energy to the worldwide user community by answering questions, offering advice, and sharing their knowledge in a professional manner. If you have technical questions concerning any Microsoft platforms or products, a good place to get your questions answered is by posting them to an appropriate newsgroup on Microsoft Technical Communities , where MVPs generally hang out and are eager to answer your questions. You can access these newsgroups using either your web browser or a NNTP newsreader.
The next step is to set up a series of policies of the management server - typically by using a Web browser to connect to a separate machine - that locks down the removable drives. When a user inserts a drive, he (along with the administrator) Block USB gets a message that says the drive isn't operable because of corporate security policies. You can allow particular groups of users, such as IT testers, unimpeded access to their drives, or you can allow specific types of drives.
Read the Assigning Devices page to learn how to list and identify your USB controllers. Carefully check whether you have a USB controller that would be appropriate to assign to a USB qube. Note that it should be free of input devices, programmable devices, and any other devices that must be directly available to dom0. If you find a free controller, note its name and proceed to step 2.
In the past, a few employees had managed to leak confidential company information and my organization ended up bleeding money. Then a colleague of mine told me about USB Block and how it's the perfect solution for the company's data. I purchase 300 copies of the software and had it installed on all computers, so far, we hadn't had any leaks - and it's been two years since we implemented USB Block. Hats of the developers!