Wednesday, April 30, 2008

Disable USB Drive using Group Policy

usb.bat file contain
regedit /s \\slche\systemrestore$\usb.reg


usb.reg file contain

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR]
"Start"=dword:00000004

usb.bat is put in logon scipt in computer policy
rsb.reg file is placed in \\slche\systemrestore$\usb.reg

No comments: