Disabling removable devices

  • Section(s): Administration
  • Published on Aug 01, 2006.
  • Last Modified on Aug 01, 2006.
  • Last Modified by Mitch Tulloch.
  • Rated 3 out of 5 based on 2 votes.
How to prevent USB devices and other removable devices from being installed in Vista.
USB storage devices have been a security concern since shortly after they first appeared in the marketplace. Admins often fear users could use these devices to remove sensitive information from work machines in violation of company policy, and as a result they've sought out third party solutions for preventing removable storage devices from working on Windows systems. Of course, as various security experts have pointed out, nothing can stop the determined individual--they could always wheel in a photocopier and put their monitor face down on the copier to steal data that way! Still, it's good that in Vista you now have an option to prevent removable devices from working. To do this, you configure local Group Policy as follows: 1. Type gpedit.msc in the Start Search box and hit Enter.

2. Click Continue when the UAC prompt appears.

3. Navigate to the following policy location:

Computer Configuration\Administrative Templates\System\Device Installation Restrictions

4. Enable the following policy setting:

Prevent Installation of Removable Devices

This will prevent all removable devices from being installed on your system. It will also prevent previously installed removable devices from being able to have their device drivers upgraded.

Cheers,
Mitch Tulloch, MVP
http://www.mtit.com

About Mitch Tulloch

Mitch Tulloch was lead author for the Windows Vista Resource Kit from Microsoft Press, which is the book for IT pros who want to deploy, maintain and support Windows Vista in mid- and large-sized network environments. Mitch was also the author of Introducing Windows Server 2008 and technical project lead for the Microsoft Office Communications Server 2007 Resource Kit, both books also from Microsoft Press. For more information on these and other books by Mitch, see www.mtit.com .

Share this article


Article not looking right or info is missing? Let us know so that we can fix it: .


Receive all the latest articles by email!

Receive Real-Time & Monthly WindowsNetworking.com article updates in your mailbox. Enter your email below!
Click for Real-Time sample & Monthly sample

Become a WindowsNetworking.com member!

Discuss your network issues with thousands of other network administrators. Click here to join!

Community Area

Log in | Register

Readers' Choice

Which is your preferred network administration tool?