Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

Register Log in
  • Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

USB Drive Audit

Status
Not open for further replies.
ljg

ljg

IS-IT--Management
Oct 2, 2002
163
US
I've been asked if we can determine the instances of USB removable drives being used in our domain. Is there a way to do this (i.e. a registry key to search for, etc) without purchasing 3rd party software?

Thanks in advance,
LJG
 
Sort by date Sort by votes
In event viewer it's listed under system log as removeable storage service events.

Received a device interface ARRIVAL notification for device:
\\?\USBSTOR#Disk&Ven_Memorex&Prod_TD_CLASSIC_003B&Rev_PMAP#07541C90CD1A&0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}

Received a device interface REMOVAL notification for device:
\\?\USBSTOR#Disk&Ven_Memorex&Prod_TD_CLASSIC_003B&Rev_PMAP#07541C90CD1A&0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}
 
Upvote 0 Downvote
Status
Not open for further replies.

Similar threads

grnzbra
  • Locked
  • Question
Formatting Full Hard Drive 1
Replies
7
Views
294
austinpctech
austinpctech
Sebastian42
  • Locked
  • Question
Getting a drive REdetected
Replies
18
Views
431
Rick998
Rick998
dpellegrini
  • Locked
  • Question
Unable to map a drive
Replies
12
Views
319
dpellegrini
dpellegrini
FraidyMan
  • Locked
  • Question
Intermittent USB 1
Replies
4
Views
127
tacohunter
tacohunter
Sebastian42
  • Locked
  • Question
Inappropriate drive icon being allocated 1
Replies
2
Views
112
DrB0b
DrB0b

Part and Inventory Search

Sponsor

Back
Top