Click OK.ġ5) A window will come up telling you that nobody will be able to access the file. Click add, type in everyone and click OK.ġ4) For both SYSTEM and everyone, click on the Full Controlcheckbox under Deny. inf).ġ3) Remove all users and groups except SYSTEM. inf file, but in this view will it not show the.
Mass storage device windows 10 how to#
Since the most expedient way of applying a solution is to deploy a Group Policy Object (GPO), let's see how to do that first:Ģ) In the left pane, expand Features, then expand Group Policy Management, and continue to drill down until you get to your target domain.ģ) Under that domain, right click Group Policy Objects.Ĥ) Name your new Group Policy Object (GPO) " Disable USB Mass Storage", leave Source Starter GPO as (none).ġ1) Right click in the left pane and select Add File.ġ2) Expand to C:\Windows\Inf\ and select usbstor (it is an. A great thing about this solution is that it is easily deployable both on a local machine as well as on a domain.įirst, let's take a look at the bigger picture. There are many ways to disable these devices, but in my experience, I have found that one of the most effective methods can be accomplished by simply changing a registry key. Disabling these devices can help to provide better security for your systems by removing an avenue of attack. USB hard drives, flash drives, and other mass storage devices can potentially pose a threat, not only of data theft, but also as a vector to viruses and other malware that could be introduced into our systems. In today's day and age, there are many threats to the security of our information systems and networks.
0 kommentar(er)
