Hi All,I need to disable the USB ports for certain user logons through GPO. My AD server is windows 2000 Small BusinessI downloaded the following script and saved as usbstor.adm CLASS MACHINE CATEGORY "Services and Drivers" POLICY "USB Storage" KEYNAME "System\CurrentControlSet\Services\usbstor" PART "Startup type" DROPDOWNLIST VALUENAME "Start" ITEMLIST NAME "Boot" VALUE NUMERIC 0 NAME "System" VALUE NUMERIC 1 NAME "Auto Load" VALUE NUMERIC 2 DEFAULT NAME "Load On Demand" VALUE NUMERIC 3 NAME "Disabled" VALUE NUMERIC 4 END ITEMLIST END PART END POLICY END CATEGORY I created a new OU, created new policy and moved certain users to this OU. I added the above .adm file. When I login, my usb storage still works. I checked the registry entry, there is no change. The value is '3' for ''start'. Any help pls..

Your ADM file is incomplete. Use this template from MS and try again: http://support.microsoft.com/kb/555324 -Allen

Hi Allen,I downloaded the ADM from Microsoft KB. I applied and found the same result. In that KB it is mentioned the ADM script is applicable for Windows 2003 Servers. But mine is Windows 2000 Small Business Server. Can I use the same script ?When I include the above .ADM file, the icon is in marked in 'red' colour. the other policy icons are in 'blue' colour. Does this means the policy is not enabled or contains error...? Can you please help me out.