Read-Only USB custom Policy for Windows XP using Domain GPO.By pdhewjau Active Directory, Blog 0 Comments
HI, back again to the blog. This time I have been doing research for the ‘GROUP POLICY EDITOR’ for server 2008 R2 and Server 2012. During my research I found that ‘GPMC’ is a quite vast tool and can control almost everything of the system on AD. Here I have created a custom group policy to block the USB drive.
沈丘ssl适用于网站、小程序/APP、API接口等需要进行数据传输应用场景，ssl证书未来市场广阔！成为
成都创新互联公司的ssl证书销售渠道，可以享受市场价格4-6折优惠！如果有意向欢迎电话联系或者加微信：028-86922220（备注：SSL证书合作）期待与您的合作！
Some of you may ask why I need to create USB drive although I do have already a policy on the server to block USB. But if you read this policy carefully you will find out that this policy is for only the OS which are higher version than Windows Vista (i.e. Windows Vista, Windows 7 and Windows 8). But if someone ask you for Windows XP than??? What will you do?? If someone ask you for make a read-only policy for USB on windows XP. What will you do again?? So Simply I have created a custom Policy that can be compatible with windows XP or any other Windows Platform OS. Copy this code, Paste on notepad and save it in the extension of ‘.adm’.
CLASS MACHINE
CATEGORY !!category1
POLICY !!policyname
EXPLAIN !!DefaultSharesExplain
KEYNAME “SystemCurrentControlSetControlStorageDevicePolicies”
VALUENAME “WriteProtect”
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY
END CATEGORY
[strings]
category1=”Storage Device Read-Only”
policyname=”Storage Device Read-Only Policy”
DefaultSharesExplain=”If Enable is selected, USB will be write Protected and only work on Read-only mode. if Disbale is selected it will work on both Read and Write mode. This policy basically works for windows XP sp3.–>Creator Aerrow”
Once you have created the adm file. Open GPMC, Create a new policy and edit it. After that go to the Computer ConfigurationàPoliciesà Administrative Template.
Right click on Administrative template and select Add/Remove Template.
Click on Add and select the .adm file you have just created and click on close.
This will import your custom policy on you Group policy editior in ADMX. Where you can enable this policy.
另外有需要云服务器可以了解下创新互联scvps.cn，海内外云服务器15元起步，三天无理由+7*72小时售后在线，公司持有idc许可证，提供“云服务器、裸金属服务器、高防服务器、香港服务器、美国服务器、虚拟主机、免备案服务器”等云主机租用服务以及企业上云的综合解决方案，具有“安全稳定、简单易用、服务可用性高、性价比高”等特点与优势，专为企业上云打造定制，能够满足用户丰富、多元化的应用场景需求。
当前标题：使用域自定义组策略-WindowsXP只读USB-创新互联
链接地址：
http://cdkjz.cn/article/ccpgoh.html
