USB Drives

Originally Posted January 7th, 2009 by mrfrerichs


It has become necessary for us here at OCSD to disable USB Drives on

our network for student use, and to accomplish that task I used a Group

Policy Startup Script to set a registry key. For the script to work

correctly subinacl.exe is also required and can be downloaded. Below is

the script:



regedit.exe /S "\\\DisableUSB.reg""\\\subinacl.exe" /keyreg \system\currentcontrolset\services\usbstor /deny=system

The reg file looks like the below.Windows Registry Editor Version 5.00[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR]"Start"=dword:00000004

I simply applied that to the student computers' startup scripts in AD and USB Drives no longer function on those machines.