Disable USBs and serial ports through Active Directory

[tenz]

Does anyone know of a way to disable USBs and/or serial ports through Active Directory? We are trying to figure out a way to disable all the USB ports and serial ports on all client computers without going from computer to computer. Thank you in advance for you time.

 

[ashpp]

Just lock down the users instead - if they can't install hardware or add programs they won't be able to use any new devices they attach.

Ash.

 

[tenz]

Thanks! We already prevent the users from installing new software. We will also prevent them from installing new hardware. We are trying to prevent unauthorized data transfers through the USB/serial ports. So, we dont know if the users may have already installed the software/hardware. We are looking for a way to completely lock out the ports for further use.

 

[ashpp]

You can also disable the Removable Storage in the GPO. Thats about as 'tight' as you are going to get without 3rd party software(haven't seen any)/disabling in the bios.

Ash.

 

[tenz]

Thank you very much for your help!!!

 

[F1lby]

Usually USB storage devices add a drive letter so that file transfer can commence. Policies can be set to prevent certain drive letters being available...... So even if they succeed in getting USB storage devices working, the drive letters won't actually work......

 

[ashpp]

Sorry i meant to say "You can also disable the Removable Storage SERVICE"

 

[tenz]

Do you know where I can disable the removable storage service in active directory? I have looked all over and I cannot seem to find it. Thanks.