+ Post New Thread
Results 1 to 2 of 2
Windows 7 Thread, Cannot stop BAT files being saved to Memory sticks :( in Technical; Here is my security policy.... Can anyone tell me what I have done wrong..... 7-Software Restriction Policy User Based Data ...
  1. #1
    kennysarmy's Avatar
    Join Date
    Oct 2005
    Location
    UK
    Posts
    1,301
    Thank Post
    80
    Thanked 46 Times in 32 Posts
    Rep Power
    31

    Cannot stop BAT files being saved to Memory sticks :(

    Here is my security policy....

    Can anyone tell me what I have done wrong.....


    7-Software Restriction Policy User Based
    Data collected on: 09/03/2011 13:46:54 hide all

    Generalhide
    Detailshide
    Domain curriculum.local
    Owner CURRICULUM\Domain Admins
    Created 31/01/2011 12:08:14
    Modified 08/03/2011 15:53:18
    User Revisions 94 (AD), 94 (sysvol)
    Computer Revisions 0 (AD), 0 (sysvol)
    Unique ID {D0E931B8-BF22-4920-818E-69790C7FB477}
    GPO Status Enabled

    Linkshide
    Location Enforced Link Status Path
    Users No Enabled curriculum.local/School/Users

    This list only includes links in the domain of the GPO.
    Security Filteringhide
    The settings in this GPO can only apply to the following groups, users, and computers:Name
    NT AUTHORITY\Authenticated Users

    WMI Filteringhide
    WMI Filter Name W7
    Description Windows 7 filter

    Delegationhide
    These groups and users have the specified permission for this GPOName Allowed Permissions Inherited
    CURRICULUM\Domain Admins Edit settings, delete, modify security No
    CURRICULUM\Enterprise Admins Edit settings, delete, modify security No
    NT AUTHORITY\Authenticated Users Read (from Security Filtering) No
    NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS Read No
    NT AUTHORITY\SYSTEM Edit settings, delete, modify security No

    Computer Configuration (Enabled)hide
    No settings defined.
    User Configuration (Enabled)hide
    Policieshide
    Windows Settingshide
    Security Settingshide
    Software Restriction Policieshide
    Enforcement
    Policy Setting
    Apply software restriction policies to the following All software files except libraries (such as DLLs)
    Apply software restriction policies to the following users All users
    When applying software restriction policies Ignore certificate rules

    Designated File Types
    File Extension File Type
    ADE ADE File
    ADP ADP File
    BAS BAS File
    BAT Windows Batch File
    CHM Compiled HTML Help file
    CMD Windows Command Script
    COM MS-DOS Application
    CPL Control panel item
    CRT Security Certificate
    EXE Application
    HLP Help file
    HTA HTML Application
    INF Setup Information
    INS INS File
    ISP ISP File
    LNK Shortcut
    MDB MDB File
    MDE MDE File
    MSC Microsoft Common Console Document
    MSI Windows Installer Package
    MSP Windows Installer Patch
    MST MST File
    OCX ActiveX control
    PCD PCD File
    PIF Shortcut to MS-DOS Program
    REG Registration Entries
    SCR Screen saver
    SHS SHS File
    URL Internet Shortcut
    VB VB File
    WSC Windows Script Component

    Trusted Publishers
    Trusted publisher management Allow all administrators and users to manage user's own Trusted Publishers
    Certificate verification None


    Software Restriction Policies/Security Levelshide
    Policy Setting
    Default Security Level Disallowed

    Software Restriction Policies/Additional Ruleshide
    Path Ruleshide
    %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot%
    Security Level Unrestricted
    Description
    Date last modified 01/02/2011 11:23:04

    %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Cur rentVersion\ProgramFilesDir%
    Security Level Unrestricted
    Description
    Date last modified 01/02/2011 11:23:04

    \\fp2\netlogon\
    Security Level Unrestricted
    Description
    Date last modified 01/02/2011 11:44:33

    \\fp2\SHApps\
    Security Level Unrestricted
    Description
    Date last modified 01/02/2011 13:09:32

    \\fp3\netlogon\
    Security Level Unrestricted
    Description
    Date last modified 01/02/2011 11:44:38

    \\fp4\SHApps\
    Security Level Unrestricted
    Description
    Date last modified 01/02/2011 13:08:45

    \\fp8\netlogon\
    Security Level Unrestricted
    Description
    Date last modified 01/02/2011 11:44:44

    A:\
    Security Level Disallowed
    Description
    Date last modified 08/03/2011 15:48:12

    B:\
    Security Level Disallowed
    Description
    Date last modified 08/03/2011 15:48:08

    D:\
    Security Level Disallowed
    Description
    Date last modified 08/03/2011 15:48:02

    E:\
    Security Level Disallowed
    Description
    Date last modified 08/03/2011 15:49:21

    F:\
    Security Level Disallowed
    Description
    Date last modified 08/03/2011 15:48:16

    G:\
    Security Level Disallowed
    Description
    Date last modified 08/03/2011 15:49:28

    H:\
    Security Level Disallowed
    Description
    Date last modified 08/03/2011 15:49:47

    I:\
    Security Level Disallowed
    Description
    Date last modified 08/03/2011 15:49:54

    J:\
    Security Level Disallowed
    Description
    Date last modified 08/03/2011 15:50:01

    K:\
    Security Level Disallowed
    Description
    Date last modified 08/03/2011 15:50:55

    L:\
    Security Level Disallowed
    Description
    Date last modified 08/03/2011 15:51:01

    M:\
    Security Level Disallowed
    Description
    Date last modified 08/03/2011 15:51:08

    O:\
    Security Level Disallowed
    Description
    Date last modified 08/03/2011 15:51:37

    Q:\
    Security Level Disallowed
    Description
    Date last modified 08/03/2011 15:51:46

    R:\
    Security Level Disallowed
    Description
    Date last modified 08/03/2011 15:52:03

    T:\
    Security Level Disallowed
    Description
    Date last modified 08/03/2011 15:52:18

    W:\
    Security Level Disallowed
    Description
    Date last modified 08/03/2011 15:52:47

    X:\
    Security Level Disallowed
    Description
    Date last modified 08/03/2011 15:52:57

    Y:\
    Security Level Disallowed
    Description
    Date last modified 08/03/2011 15:53:04

    Z:\
    Security Level Disallowed
    Description
    Date last modified 08/03/2011 15:53:17

  2. #2
    kennysarmy's Avatar
    Join Date
    Oct 2005
    Location
    UK
    Posts
    1,301
    Thank Post
    80
    Thanked 46 Times in 32 Posts
    Rep Power
    31
    I found this online:

    It seems Microsoft has changed this for Windows 7... and almost none of the sites with instructions have been updated to include the new 7-specific instructions (the old method--even for Vista--didn't work in 7). Here are the new GPO settings you also need to use if you have Windows 7 clients:

    Block USB in Windows 7 using Group Policy

    Computer Configuration > Policies > Administrative Templates > System > Removable Storage Access

    Removable Disks: Deny execute access Enabled
    Removable Disks: Deny read access Enabled
    Removable Disks: Deny write access Enabled

  3. Thanks to kennysarmy from:

    rich_tech (17th July 2012)

SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 6
    Last Post: 9th October 2011, 08:12 PM
  2. Memory Sticks Encryption
    By steveo2000 in forum Hardware
    Replies: 1
    Last Post: 8th February 2011, 03:12 PM
  3. Need some Memory Sticks
    By karldenton in forum General Chat
    Replies: 4
    Last Post: 19th November 2009, 03:22 PM
  4. USB Memory Sticks
    By smokeshat in forum Hardware
    Replies: 2
    Last Post: 18th November 2009, 10:26 AM
  5. USB Memory Sticks
    By G-Jackson in forum Our Advertisers
    Replies: 11
    Last Post: 18th September 2009, 08:23 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •