I just implemented the USB.ADM group policy option to disable USB removable devices on my network.
Then it caused a problem! You're not able to access digital cameras.
So I searched the Web and found a way to disable writing to USB removable drives.
Thank you to http://www.petri.co.il/disable_writing_to_usb_disks_in_xp_sp2_with_gpo.htm
———-COPY EVERYTHING BELOW THIS LINE for the Script———-
PART !!labeltextwriteprotect DROPDOWNLIST REQUIRED
NAME !!Disabled VALUE NUMERIC 0 DEFAULT
NAME !!Enabled VALUE NUMERIC 1
category="Custom Policy Settings"
policynamewriteprotect="Write Protect USB Removable Drives"
explaintextwriteprotect="Enforces write protection on all USB Removable Drives. \n\nSelect the ENABLED radiobox, then select ON for the Write Protect USB Removable Drives status in the drop-down list. \n\nIn order to disable write protection on USB Removable Drives select OFF for the Write Protect USB Removable Drives status in the drop-down list."
labeltextwriteprotect="Write Protect USB Removable Drives status"
———-COPY EVERYTHING ABOVE THIS LINE for the Script———-
PLEASE MAKE SURE NO WORD WRAPPING IS HAPPENING IN YOUR SCRIPT!!!
Save the file as write_protect_removable_drives.adm in your c:\Windows\inf folder
Open your group policy editor and import the file.
This template is considered a preference rather than a true policy and will tattoo the registry of client computers with its settings. If this template is moved out of scope of the Group Policy which applies it, the registry changes it makes will remain. If you wish to reverse the settings made by this template, simply reverse the options to re-enable the drivers.
Preference settings are hidden by default in the Group Policy template editor. When applying this template, follow these instructions to change the view settings that allow preferences to be viewed.
1. These registry changes are not removed when the policy is removed.
2. In order to change settings you need to reverse the policy and enable USB
Or, you can change the registry key:
and change WriteProtect to "0"
This information is provided "AS IS" with no warranties expressed or implied.