How to disable USB devices using Group Policy

hi every body. i have 175 client but they arent in a domain . how disable all client usb exept mouse and keyboard by policy from active directory dhcp?

After applying this method, will power charging devices over USB still be permitted?

Thanks

I would like to disable all removable media access, but this is not practical for business. Is there a way to disable all access, but allow the administrators to override so that someone can use a USB stick and had the admin allow it with their credentials?

Hi PRAJWAL, I cannot find such template in the standard administrative templates how to get it

quick question bro if we do gpupdate on each and every client machine it will take time. how can we perform gpupdate without client

Great Sharing Prajwal.. Is there any way to allow the USB Storage access only for Administrators in Windows 10 Work Group devices!

does his only apply to storage devices? are keyboards disabled?

Well but how can block Apple iphone which used iTunes to get access , this policy doesn’t work for iPhone;)

any way to do it per user

Though disabling USB devices by using group policies if effective, it is not the most user-friendly or easy way to go about it. Nor is it the most secure and effective method. CurrentWare AccessPatrol is an endpoint security software that allows administrators to set endpoint device policies on their network. This software applies to more than just USB devices, as it can be used to block or allow smart phones, sound cards, adapters, bluetooth devices and much more. From one central console, administrators can apply endpoint security policies and they can even run reports to see endpoint activity in their… Read more »

is there a way for the admin to use the usb port without disabling the policies

We’re using ThreatLocker in our company. It’s easy to manage and allows blocking USB devices, DVD/BD, etc. It also helps with permitting or denying path access to our fileservers and application whitelisting.

right clicking on the group policy objects and clicking new will not create the thing you’ve made a screenshot of … next time before you jump over a few steps, please decide if you make a step by step tutorial for the average user or for yourself. (the latter doesn’t need a tutorial)

Thanks for the article. Do you know if there is a way to allow only a group of USB sticks (based maybe on hardware ID) on user’s computers and block all other USB drives? Maybe a company can buy a number of USB corporate sticks which can be allowed to work on user’s computers but all other USB sticks should be denied.

Thanks

i done try this, but still enable usb access, you know why?

hi I applied the policy and it was applied I could see that using gpresult /r but when I insert usb I am able to copy to and from usb. in this case I was loged on server 2012r2 as regular user I see all other policy are applied and working but usb deny is not working eventhough it is applied

Thank you Sir. I am very new to Server environment. I am thankful to you for valuable posts.

any one explain me how to re enable of USB storage foe specific users.

dear sir,
We having win2008r2 server now we are planning to implement sccm . how we can configure sccm suggest the license details also
thankyou

I need help for disable Bluetooth via GPO
Please suggest

How to disable Bluetooth via gpo

Hi Prajwal, I am a junior network administrator, my boss wants keyboard port delete in disabled, can mr help me?

Hi Prajwal, excellent article. Well I am new to Group Policies. My question is that configuring this policy will also disable the usb mouse and keyboard ?

How to create simple passwords for users using group policy

It was blocking remaining drives too (D: ,E:) when apply the above policy. HELP me pls

It was blocking remaining drives too (D: ,E:) when apply the above policy. HELP me pls

So far we have created a group policy object, the next step is to link the GPO to the OU containing the computer accounts for which the USB devices are to be blocked. Right click on the OU and click Link an Existing GPO.

I am at this stage but all i see is my “Block USB” object is in “Group Policy Object” Thus, i cant right click and Link an Existing GPO.

Did this and it blocked access to the CD and DVD drive too.

Good instructions thanks Prajwal. I have implemented this successfully but was wondering how to enable USB storage for a group of users on the USB disabled PCs. I thought I could simply copy this GPO but select disabled instead of enabled and then move it up the list when linking the GPO so it takes precedence. So far not working. Any ideas? Thanks, Lon

Sorry disable administrator or disable all users, because when i do this it disable only admin not user

Hi thanx for the wonderful information , i am new to system admin so i am working for a organisation where we have 100 computers connected to a network with windows server 2012 i don’t have any security for network so want to know for antivirus which is best for a network i heard we get antivirus server what is that and how do i access users remotely which software usually companies uses to access systems remotely for issues.

From the link for how to block USB access using GPO. If in an organization we are applying this policy to all the users(including BYOD users) and If the BYOD users use their systems outside the network, will it be possible to use USB even logging with domain account.

Please confirm if any alternate way is available.