prevent usb stick
hi all,i have design a policyon win2008 to allow installation of devices classes and have excluded one usb stick. secondary I have"display a customer message" and prevent installation of devices (last entry)both settings are not enabled on windows 7gpupdate /force - no effectgpedit.msc - Administrative Templates - System - Device Installation - Device Installation Restriction = not settingspc is correct in OU and Domain because other settings are correct stored
February 5th, 2009 11:46am

USB Device was installed - now I have deinstalled the device it works fine, but why doesn't show gpedit.msc the setting in windows 7?
Free Windows Admin Tool Kit Click here and download it now
February 5th, 2009 12:04pm

You should be using GPRESULT /H c:\somefile.html or GPRESULT /Z c:\somefile.txt to see how policies are being applied, not gpedit.msc.Please give us exact repro steps for your issue with details on the USB device and it's device hardware ID. Ned Pyle [MSFT] - MS Enterprise Platforms Support - Beta Team
February 7th, 2009 11:06pm

It may interest you that we have been working with Symantec, specifically Endpoint 11 (antivirus only) to block .EXEs from running automatically from USB sticks as a policy from the server level. Found out today that it is blocking not only automatic execution but also manual execution. Alas, Endpoint is not compatible with the one Windows 7 machine on the network.T.R.
Free Windows Admin Tool Kit Click here and download it now
February 14th, 2009 7:27am

That is extremely interesting, actually. :) Thanks for the info Taxidermy Refugee.Ned Pyle [MSFT] - MS Enterprise Platforms Support - Beta Team
February 14th, 2009 8:20am

Actually, Endpoint already has the ability to block. We did not need an update/patch.On the server, create a policy - hardware - device, call it USBstick.Then add extensions to block: *.exe, *.com, *.bat, *.msi, whatever java.This will push down to all machines on the network running Symantec to protect clients from viral infection.But you could use this for other purposes.T.R.
Free Windows Admin Tool Kit Click here and download it now
February 17th, 2009 1:31am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics