Blocking USBTethering without GPO

Amaravadi, Anusha 0 Reputation points
2024-09-17T11:00:15.7166667+00:00

Is there any to block USBTethering/ stop executing RNDIS.sys file apart from updating GPO policies? Updating GPO policy for one device will be easy but if there are multiple devices, it is not easy right.

Windows 10
Windows 10
A Microsoft operating system that runs on personal computers and tablets.
11,566 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Wesley Li 8,775 Reputation points
    2024-09-17T14:42:06.69+00:00

    Hello

    Blocking USB tethering or stopping the execution of the RNDIS.sys file without using Group Policy Objects (GPO) can indeed be challenging, especially when dealing with multiple devices. However, there are a few alternative methods you can consider:

    Device Manager: You can manually disable the RNDIS driver in the Device Manager. This method is suitable for individual devices but may not be practical for a large number of devices.

    Registry Editor: You can create a registry script to disable the RNDIS driver. This script can be deployed to multiple devices using a software deployment tool. Here is an example of a registry script:

    Windows Registry Editor Version 5.00

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RNDISMP]

    "Start"=dword:00000004

    This script sets the RNDISMP service to "disabled" (Start=4).

    Endpoint Management Tools: Tools like Microsoft Intune can be used to manage device configurations and enforce policies across multiple devices. Intune allows you to create custom configuration profiles that can disable specific drivers or services.

    Local Security Policy: You can use the Local Security Policy to block the installation of specific device drivers. This method is similar to using GPO but can be applied locally on each device.

    Third-Party Security Software: Some endpoint security solutions offer features to block specific types of network connections, including USB tethering. These solutions can be deployed across multiple devices and managed centrally.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.