Block USB on Computers using GPO

Hey guys, – that’s going to be very forces and a short article:

In this tutorial, you are going to learn how to block USB on your domain computers by GPO,

I know several security institutions that always enabled this policy and trying to avoid any virus or malware or penetrate attempt from running on machines.

In order to enable this policy, you have open GPO and navigate yourself to:

User Configuration\Policies\Administrative Templates\System\Removable Storage Access.


 

Block USB GPO

And enable this:

All Removable Storage classes: Deny all Access

Block USB GPO

 

By the way, above this policy, you can set only to read and don’t write, therefore I prefer to leave this decision to you.
Trying Insert USB and got this error:

Block USB GPO

About Meir Peleg 338 Articles
My name is Meir Peleg, (Born 30/04/1991) live in ISRAEL. Live and breath IT world. Microsoft MVP Windows IT & VMware vExpert.