For anyone who has successfully disabled USB devices via GPO Share on Facebook Post on reddit Tweet on Twitter Share on LinkedIn Home › Forums › Server Operating Systems › Windows Server 2000 / 2003 / 2003 R2 › For anyone who has successfully disabled USB devices via GPO This topic has 6 replies, 3 voices, and was last updated 11 years, 5 months ago by Systematic. Viewing 1 post (of 1 total) Author Posts SystematicMember Aug 12, 2009 at 3:03 am #143739 Guys, I’d like to disable USB Storage Devices on an OU that contains about 100 computer accounts. I’ve read the Petri guide found here: http://petri.com/disable_usb_disks_with_gpo.htm Ive successfully imported the ADM file. The ONLY thing I havent done is remove the SYSTEM account from the ACL on USBSTOR.INF and USBSTOR.PNF Why? Well i’ve read some similiar tutiorials that differ slightly: http://diaryproducts.net/about/operating_systems/windows/disable_usb_sticks This one has a different ADM file and basically says do no remove the SYSTEM account http://www.windowsecurity.com/articles/Control-USB-Devices-Group-Policy.html And this article says leave the SYSTEM account in ACL but add the user group account and deny access to all. Can someone please point me in the right direction: Do I remove the SYSTEM account altogether as per the Petri article or do I leave and follow on of the other guided suggestions. Please help a newb! Thanks Author Posts Viewing 1 post (of 1 total) You must be logged in to reply to this topic.