Disabling USB through GPO

Oh man! Ad-blocking software has been detected! :'(

This website is run by the community, for the community... and it needs advertisements in order to keep running. Blocking our ads means your killing our stats!
Please disable your ad-block, or become a premium member to hide all advertisements and this notice.

I tried to disable USB through GPO , but it fails. It is showing that group policy is empty and its filtered out. Any suggestions?

 

Oh man! Ad-blocking software has been detected! :'(

This website is run by the community, for the community... and it needs advertisements in order to keep running. Blocking our ads means your killing our stats!
Please disable your ad-block, or become a premium member to hide all advertisements and this notice.

I do indeed have a suggestion for you. Hire a consultant, or at least admit to the management where you work that you are out of your depth. If you don't know how to collect the current IP addresses in use in your organisation, you shouldn't be in charge of group policies.

Another thing - since you joined a few days ago, you have contributed nothing to the community here, instead asking a steady stream of questions that ate clearly to enable you to do your job. You should be aware that very little pisses experienced techs off like people working in IT who don't know what they're doing.

 

if a person asks a question does it mean that he is not technically sound?...You are a bull **** i believe. Instead of suggesting me in that way you could have told that you dont know how to disable the USB via GPO. Absolute crap.Get lost

 

Zeb is making a valid point you have post questions and said thing like that nobody passes information on, why dont you start implementing some documentation so everyone knows what to do or what has been done and get them to do the same?

You have indeed not contributed anything to the forum, I havent seen you try to help anyone out here.

Zeb is a very experienced systems engineer and he knows a lot more than most of us do on here and I can see why he gets pissed off. You seem to be asking very simple things that you should know how to do if you are a network or systems admin. I am not so can't help you with your GPO question but the other ones you asked I could but it sounded more like you didn't understand what was going and that isn't good from a business perspective and that's probably why Zeb got pissed off. Because of his experience level he will have seen many people bull**** there way into a networking job and haven't got the first clue about anything, it happens but it pisses people off.

 

Spot on. I don't know how to disable USB via a GPO. Thanks for pointing that out to me.

Unfortunately for you, I DO, in fact, know how to disable USB devices (you weren't specific in which class of device you meant, but I assume you mean removable drives, rather than keyboards and mice) via GPOs. It involves deploying a custiom adm template in AD, and applying it using a WMI filter. Of course, this method is a PITA, so most people with experience usually just implement a piece of third-party software and some spiteful HR policies instead.

However, rather than do your work for you, I thought it better to let you know that this forum isn't in existence to help someone who has contributed zero to the community to answer a steady stream of low-level technical questions. The level of your other questions marks you out indeed as 'not technically sound' - because I have yet to meet a single person who has worked in IT for more than a week who doesn't know what a ping sweep is.

Thanks for your input though - it's always nice to be told you're a bull5hitter by someone with the technical experience of a chicken nugget.

 

Zeb, will you marry me?
Our children would give the world the sorting out it really needs!

 

A ping sweep (also known as an ICMP sweep) is a basic network scanning technique used to determine which of a range of IP addresses map to live hosts (computers). Whereas a single ping will tell you whether one specified host computer exists on the network, a ping sweep consists of ICMP (Internet Control Message Protocol) ECHO requests sent to multiple hosts. If a given address is live, it will return an ICMP ECHO reply. Ping sweeps are among the older and slower methods used to scan a network.biggrin

 

Nah. You're a bloke. Who would go through the pregnancy? We'd have to sort all that out first, and - what with it being medically impossible and all - it would be a right chore.

Plus, you're Welsh.

 

ZING!!

 

Sorry to bring this back on track but we use Lumension Endpoint Management and although a little tricky for remote workers, it is a very good product on the whole. Look here for an evaluation version:

http://www.lumension.com/Products/E...-Evaluation/LEMSS-Total-Track-Evaluation.aspx

Hope this helps....

Madz

 

Am not!

Well, naturalised possibly - but actually Essex born and bred.

Is that any better?

 

Course!!!

 

omg that made me laugh. Thanks since i am going through a bit of a bad patch and this lifted me a bit

 

Got to be honest I don't think many companies use GPO's to block USB devices. From what I know it's a pain to do through GPO's. I've used sanctuary in a couple of companies but found it a pain as well to use but thats because blocking USB devices is a ball ache as a techie when you want to plug a USB stick into a PC to sort an issue and the thing is blocked as you forgot to unblock it .

I'll agree with the lads if you are struggling you really need to talk to management as if you get sacked from your job for ticking the wrong box or deleting the wrong thing and bringing the companies network to it's knees chances are your IT career is over.

 

I've seen something similar by disabling the mass storage service but this will only stop people using pen drives etc, things like scanners and printers will still be detected but they will need drivers to install.

There isn't a really good way to do this via GPO, but the above is probably your best option.