1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Disabling USB through GPO

Discussion in 'Networks' started by JSA ALU, Jul 23, 2010.

  1. JSA ALU

    JSA ALU Bit Poster

    I tried to disable USB through GPO , but it fails. It is showing that group policy is empty and its filtered out. Any suggestions?
  2. zebulebu

    zebulebu Terabyte Poster

    I do indeed have a suggestion for you. Hire a consultant, or at least admit to the management where you work that you are out of your depth. If you don't know how to collect the current IP addresses in use in your organisation, you shouldn't be in charge of group policies.

    Another thing - since you joined a few days ago, you have contributed nothing to the community here, instead asking a steady stream of questions that ate clearly to enable you to do your job. You should be aware that very little pisses experienced techs off like people working in IT who don't know what they're doing.
    Certifications: A few
    WIP: None - f*** 'em
  3. JSA ALU

    JSA ALU Bit Poster

    if a person asks a question does it mean that he is not technically sound?...You are a bull **** i believe. Instead of suggesting me in that way you could have told that you dont know how to disable the USB via GPO. Absolute crap.Get lost
  4. greenbrucelee
    Highly Decorated Member Award

    greenbrucelee Zettabyte Poster

    Zeb is making a valid point you have post questions and said thing like that nobody passes information on, why dont you start implementing some documentation so everyone knows what to do or what has been done and get them to do the same?

    You have indeed not contributed anything to the forum, I havent seen you try to help anyone out here.

    Zeb is a very experienced systems engineer and he knows a lot more than most of us do on here and I can see why he gets pissed off. You seem to be asking very simple things that you should know how to do if you are a network or systems admin. I am not so can't help you with your GPO question but the other ones you asked I could but it sounded more like you didn't understand what was going and that isn't good from a business perspective and that's probably why Zeb got pissed off. Because of his experience level he will have seen many people bull**** there way into a networking job and haven't got the first clue about anything, it happens but it pisses people off.
    Certifications: A+, N+, MCDST, Security+, 70-270
    WIP: 70-620 or 70-680?
  5. zebulebu

    zebulebu Terabyte Poster

    Spot on. I don't know how to disable USB via a GPO. Thanks for pointing that out to me.

    Unfortunately for you, I DO, in fact, know how to disable USB devices (you weren't specific in which class of device you meant, but I assume you mean removable drives, rather than keyboards and mice) via GPOs. It involves deploying a custiom adm template in AD, and applying it using a WMI filter. Of course, this method is a PITA, so most people with experience usually just implement a piece of third-party software and some spiteful HR policies instead.

    However, rather than do your work for you, I thought it better to let you know that this forum isn't in existence to help someone who has contributed zero to the community to answer a steady stream of low-level technical questions. The level of your other questions marks you out indeed as 'not technically sound' - because I have yet to meet a single person who has worked in IT for more than a week who doesn't know what a ping sweep is.

    Thanks for your input though - it's always nice to be told you're a bull5hitter by someone with the technical experience of a chicken nugget.
    Last edited: Jul 23, 2010
    Certifications: A few
    WIP: None - f*** 'em
  6. JonnyMX

    JonnyMX Petabyte Poster

    Zeb, will you marry me?
    Our children would give the world the sorting out it really needs!

    Certifications: MCT, MCTS, i-Net+, CIW CI, Prince2, MSP, MCSD
  7. Darkfunnyguy

    Darkfunnyguy Byte Poster

    A ping sweep (also known as an ICMP sweep) is a basic network scanning technique used to determine which of a range of IP addresses map to live hosts (computers). Whereas a single ping will tell you whether one specified host computer exists on the network, a ping sweep consists of ICMP (Internet Control Message Protocol) ECHO requests sent to multiple hosts. If a given address is live, it will return an ICMP ECHO reply. Ping sweeps are among the older and slower methods used to scan a network.:D:biggrin
    Certifications: A+, N+, MCP, MCDST, MCSA 2003
    WIP: Server+, Vista,
  8. JK2447
    Highly Decorated Member Award 500 Likes Award

    JK2447 Petabyte Poster Administrator

    Top Poster
    of the Month

    Ha ha Johnny you crack me up. I can imagine a kid beween you two to look like a young Spanish Dan Akyroid!

    Seriously tho, to the original poster, what reaction did you expect asking about things that are clearly for your job? Don't get me wrong, asking a challenging question on something you've come across in work, sure, but something you should know if you are an admin? We'd be just getting you into deeper water wouldn't we. Your management would give you increasingly difficult tasks to do which would stress you out or even get you sacked if you got wrong.

    If you aren't sure on something use Google and your peers. I hardly ask any work related questions on here because I work for a big firm that has specialists in every field. I ask about certification and talk in the off subject forum mostly.
    Last edited: Jul 23, 2010
    Certifications: VCP4, VCP5, VCP6, VCP6.5, BSc (Hons), HND IT, HND Computing, ITIL-F, MBCS CITP, MCP (270,290,291,293,294,298,299,410,411,412) MCTS (401,620,624,652) MCSA:Security, MCSE: Security, Security+, CPTS, CCA (XenApp6.5), MCSA 2012, VSP, VTSP
    WIP: AWS Certified Solutions Architect - Associate
  9. zebulebu

    zebulebu Terabyte Poster

    Nah. You're a bloke. Who would go through the pregnancy? We'd have to sort all that out first, and - what with it being medically impossible and all - it would be a right chore.

    Plus, you're Welsh. :biggrin
    Certifications: A few
    WIP: None - f*** 'em
  10. Bluerinse
    Honorary Member

    Bluerinse Exabyte Poster

    ZING!! :biggrin
    Certifications: C&G Electronics - MCSA (W2K) MCSE (W2K)
  11. madskillz

    madskillz Nibble Poster

    Certifications: MCSA, MCDST, ITIL v3 F
    WIP: 70-293
  12. JonnyMX

    JonnyMX Petabyte Poster

    Am not! :ohmy

    Well, naturalised possibly - but actually Essex born and bred.

    Is that any better? :blink:oops:
    Certifications: MCT, MCTS, i-Net+, CIW CI, Prince2, MSP, MCSD
  13. kat731
    Honorary Member

    kat731 Megabyte Poster

    Certifications: BA (Hons), A+
    WIP: 70-685 77-884
  14. Shizzle

    Shizzle Bit Poster

    omg that made me laugh. Thanks since i am going through a bit of a bad patch and this lifted me a bit :)
  15. michael78

    michael78 Terabyte Poster

    Got to be honest I don't think many companies use GPO's to block USB devices. From what I know it's a pain to do through GPO's. I've used sanctuary in a couple of companies but found it a pain as well to use but thats because blocking USB devices is a ball ache as a techie when you want to plug a USB stick into a PC to sort an issue and the thing is blocked as you forgot to unblock it :x.

    I'll agree with the lads if you are struggling you really need to talk to management as if you get sacked from your job for ticking the wrong box or deleting the wrong thing and bringing the companies network to it's knees chances are your IT career is over.
    Certifications: A+ | Network+ | Security+ | MCP | MCDST | MCTS: Hyper-V | MCTS: AD | MCTS: Exchange 2007 | MCTS: Windows 7 | MCSA: 2003 | ITIL Foundation v3 | CCA: Xenapp 5.0 | MCITP: Enterprise Desktop Administrator on Windows 7 | MCITP: Enterprise Desktop Support Technician on Windows 7
    WIP: Online SAN Overview, VCP in December 2011
  16. tenrou

    tenrou New Member

    I've seen something similar by disabling the mass storage service but this will only stop people using pen drives etc, things like scanners and printers will still be detected but they will need drivers to install.

    There isn't a really good way to do this via GPO, but the above is probably your best option.
    Certifications: CCNA, Commvault, MCSE, MCITP:EA EMA DBA
    WIP: SCVMM, VCP, EMA 2010

Share This Page