Share via

Create A GPO to disable USB Storage Devices

Anonymous
2023-12-07T10:02:09+00:00

Create A GPO to disable USB Storage Devices.

Hi All, newly setup environment. ON prem AD syncing to AAD

I need block access to all USB Removable storage devices but allow some users to have access.

My idea is to create the policy and link it to the computers OU, then under the policy delegation add a security group with users and deny the "Apply Group Policy." to that group. So, they will be exempt from the policy.

By doing this, if a user that has been assigned access via that group, logs in to any workstation, they will have access to USB Storage?

Even though the policy is assigned to workstations.

Keeping in mind of allowing all other peripherals like Keyboard, mouse for all users , just blocking storage devices

Thank you.

Desigan

Windows for business | Windows Server | Directory services | Deploy group policy objects

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

10 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2025-02-19T19:38:49+00:00

    Hi Askshay,

    I believe you have to put the computers that you don't want to apply to this group, since it is a domain GPO at the computer level. 

Test it. 

Another issue is to see if in your domain, on the DC where you are configuring this policy, it is replicating the GPO/GPO settings to the other domain controllers. 

As a result, after doing this, you can open the CMD as an administrator and run: 

gpupdate /force 
After that, restart the workstation. 

Open the CMD again, as an administrator and type 
gpresult /r to validate if the GPO is in fact applied. 

And another command would be rsop to validate if the configuration is being applied on the workstation. 

I am at your disposal

    Was this answer helpful?

    0 comments
  2. Anonymous
    2024-10-31T15:44:18+00:00

    I created the group policy but not working

    Getting below error please suggest how to resolve.

    Was this answer helpful?

    0 comments
  3. Anonymous
    2024-06-21T19:57:03+00:00

    You may already have found the answer; however, for those still looking: This is a computer GPO policy being enacted. The Security Group to exclude would work but you add computers to the group, not users. Add a computer to exclude to your group, reboot for it to gain its updated access token and reflect the changes.

    Was this answer helpful?

    0 comments
  4. Deleted

    This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

    Comments have been turned off. Learn more

  5. Anonymous
    2023-12-08T09:31:28+00:00

    Hello Desigan Reddy,

    You are welcome ! if you have any other questions you can always reply, wish you have a good day!

    Best regards,

    Qiuyang

    Was this answer helpful?

    0 comments