I am trying to create a policy that disables USB drives for SOME users only.
I’ve found the .adm (online here) that disables USB drives but it changes settings in the computer configuration section of the GPO and only seems to work if I put a computer account into that OU vs a user account.
I’ve put all the computers normally used by the users who are not allowed to use USB drives into an OU and the restriction works perfectly.
The problem is that if a user who is not allowed to use a USB drive, logs onto someone else’s PC who is allowed to use a USB drive, the restriction is not applied.
Maybe I don’t totally understand how GP’s are applied. Is the Computer Configuration section of a GP applied only to computer accounts in the OU, and User Configuration section applied only to the user accounts?
I don’t really care if the setting needs to be reset if a restricted user uses a non-restricted user’s PC, I can deal with that.
Any help would be greatly appreciated
You must be logged in to reply to this topic.
Create a free account today to participate in forum conversations, comment on posts and more.