Read-Only USB custom Policy for Windows XP using Domain GPO.By pdhewjau Active Directory, Blog 0 Comments
HI, back again to the blog. This time I have been doing research for the ‘GROUP POLICY EDITOR’ for server 2008 R2 and Server 2012. During my research I found that ‘GPMC’ is a quite vast tool and can control almost everything of the system on AD. Here I have created a custom group policy to block the USB drive.

沈丘ssl適用于網(wǎng)站、小程序/APP、API接口等需要進(jìn)行數(shù)據(jù)傳輸應(yīng)用場(chǎng)景，ssl證書未來市場(chǎng)廣闊！成為成都創(chuàng)新互聯(lián)公司的ssl證書銷售渠道，可以享受市場(chǎng)價(jià)格4-6折優(yōu)惠！如果有意向歡迎電話聯(lián)系或者加微信：028-86922220（備注：SSL證書合作）期待與您的合作！

Some of you may ask why I need to create USB drive although I do have already a policy on the server to block USB. But if you read this policy carefully you will find out that this policy is for only the OS which are higher version than Windows Vista (i.e. Windows Vista, Windows 7 and Windows 8). But if someone ask you for Windows XP than??? What will you do?? If someone ask you for make a read-only policy for USB on windows XP. What will you do again?? So Simply I have created a custom Policy that can be compatible with windows XP or any other Windows Platform OS. Copy this code, Paste on notepad and save it in the extension of ‘.adm’.

CLASS MACHINE

CATEGORY !!category1

POLICY !!policyname

EXPLAIN !!DefaultSharesExplain

KEYNAME “SystemCurrentControlSetControlStorageDevicePolicies”

VALUENAME “WriteProtect”

VALUEON NUMERIC 1

VALUEOFF NUMERIC 0

END POLICY

END CATEGORY

[strings]

category1=”Storage Device Read-Only”

policyname=”Storage Device Read-Only Policy”

DefaultSharesExplain=”If Enable is selected, USB will be write Protected and only work on Read-only mode. if Disbale is selected it will work on both Read and Write mode. This policy basically works for windows XP sp3.–>Creator Aerrow”

Once you have created the adm file. Open GPMC, Create a new policy and edit it. After that go to the Computer ConfigurationàPoliciesà Administrative Template.

Right click on Administrative template and select Add/Remove Template.

Click on Add and select the .adm file you have just created and click on close.

This will import your custom policy on you Group policy editior in ADMX. Where you can enable this policy.

另外有需要云服務(wù)器可以了解下創(chuàng)新互聯(lián)scvps.cn，海內(nèi)外云服務(wù)器15元起步，三天無理由+7*72小時(shí)售后在線，公司持有idc許可證，提供“云服務(wù)器、裸金屬服務(wù)器、高防服務(wù)器、香港服務(wù)器、美國(guó)服務(wù)器、虛擬主機(jī)、免備案服務(wù)器”等云主機(jī)租用服務(wù)以及企業(yè)上云的綜合解決方案，具有“安全穩(wěn)定、簡(jiǎn)單易用、服務(wù)可用性高、性價(jià)比高”等特點(diǎn)與優(yōu)勢(shì)，專為企業(yè)上云打造定制，能夠滿足用戶豐富、多元化的應(yīng)用場(chǎng)景需求。

分享文章：使用域自定義組策略-WindowsXP只讀USB-創(chuàng)新互聯(lián)
轉(zhuǎn)載來于：http://weahome.cn/article/ccpgoh.html