Sponsored Links

I just implemented the USB.ADM group policy option to disable USB removable devices on my network.
Then it caused a problem! You're not able to access digital cameras.
So I searched the Web and found a way to disable writing to USB removable drives.
Thank you to http://www.petri.co.il/disable_writing_to_usb_disks_in_xp_sp2_with_gpo.htm

----------COPY EVERYTHING BELOW THIS LINE for the Script----------
CLASS MACHINE
CATEGORY !!category
 CATEGORY !!categoryname
  POLICY !!policynamewriteprotect
   KEYNAME "SYSTEM\CurrentControlSet\Control\StorageDevicePolicies"
   EXPLAIN !!explaintextwriteprotect
     PART !!labeltextwriteprotect DROPDOWNLIST REQUIRED
 
       VALUENAME "WriteProtect"
       ITEMLIST
        NAME !!Disabled VALUE NUMERIC 0 DEFAULT
        NAME !!Enabled VALUE NUMERIC 1
       END ITEMLIST
     END PART
   END POLICY
 END CATEGORY
END CATEGORY
 
[strings]
category="Custom Policy Settings"
categoryname="Write Protection"
policynamewriteprotect="Write Protect USB Removable Drives"
explaintextwriteprotect="Enforces write protection on all USB Removable Drives. \n\nSelect the ENABLED radiobox, then select ON for the Write Protect USB Removable Drives status in the drop-down list. \n\nIn order to disable write protection on USB Removable Drives select OFF for the Write Protect USB Removable Drives status in the drop-down list."
labeltextwriteprotect="Write Protect USB Removable Drives status"
Enabled="On"
Disabled="Off"

----------COPY EVERYTHING ABOVE THIS LINE for the Script----------

 

PLEASE MAKE SURE NO WORD WRAPPING IS HAPPENING IN YOUR SCRIPT!!!

Save the file as write_protect_removable_drives.adm in your c:\Windows\inf folder

Open your group policy editor and import the file.

 

This template is considered a preference rather than a true policy and will tattoo the registry of client computers with its settings. If this template is moved out of scope of the Group Policy which applies it, the registry changes it makes will remain. If you wish to reverse the settings made by this template, simply reverse the options to re-enable the drivers.

Preference settings are hidden by default in the Group Policy template editor. When applying this template, follow these instructions to change the view settings that allow preferences to be viewed.


1. These registry changes are not removed when the policy is removed.
2. In order to change settings you need to reverse the policy and enable USB
 Or, you can change the registry key:
 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\StorageDevicePolicies
 and change WriteProtect to "0"
 
This information is provided "AS IS" with no warranties expressed or implied.