Windows Server 2008 R2 Thread, How to enable USB/SD etc for students in Technical; I must be missing something but I cant see what. I have been asked to enable the usb and sd ...
12th September 2012, 12:06 PM #1
How to enable USB/SD etc for students
I must be missing something but I cant see what. I have been asked to enable the usb and sd card facility for students but for the life of me I cant find the policy that has disabled it!
Currently staff can access removeable storage but students cannot.
So my thinking is that the disabling must happen in a policy that only applies to the students.
We have a 'students' policy that is the only one directly applied to student users but it isnt in there. All other policies are applied to either more than one group of people, or to computers.
Any ideas where else I could be looking?
12th September 2012, 12:30 PM #2
I'd try looking in
Computer Configuration - Administrative Templates - System - Removable Storage Access
Computer Configuration - Administrative Templates - System - Device Installation - Device Installation Restriction
They're the locations which pop into mind when restricting access to removable storage.
12th September 2012, 01:01 PM #3
Thanks, but it cant be in Computer Configuration, it has to be User, doesnt it? Staff can access drives wherever they are.
I was looking in removeable storage access.
I have had a look at installation and nothing is configured anyway.
No drives are hidden anywhere either
12th September 2012, 01:57 PM #4
Someone must know. I have looked through every single policy (clutching at straws, here) and nowhere is access to removeable storage disabled. So it is somewhere else?
As I said, Staff can access such things but students cant.
There is something I am missing - but what?
12th September 2012, 02:47 PM #5
Could it be in the AV software, I know that some can happily block user access to all sorts of stuff based on the group.
I'd also do an RSoP for a student and a teacher then have a compare (or use GPO modelling in the group policy management thing in 2008 R2 which is probably easier).
12th September 2012, 03:24 PM #6
Loopback policy on the OU triggered by security group membership? (filter policy by security group - if you're a kid it applies, if staff it doesn't?)
What does Group Policy modelling show?
GPMC > Group Policy Modeling (second from bottom) - model against a kid on randomcomputer01, then against a member of staff on randomcomputer02 and compare.
You can also do stuff with device drivers and security groups (well, on XP at least you can).
12th September 2012, 03:49 PM #7
Are you using USBDLM to control devices/ports?
12th September 2012, 03:59 PM #8
Could it be simply that you have drive letters hidden for students which includes the drive letters which would be used by the removable devices? Off the top of my head I could not direct you to the policies, but something like:
User -> Policies -> Windows -> Explorer -> Hide all drive letters except...
12th September 2012, 06:26 PM #9
Drive letters not hidden - well, only the C drive as you would expect
Definitely not the antivirus
Dont know if I am using USBDLM - how do I tell?
Will look at Group Policy Modelling tomorrow
The machines are all windows 7 and this has only occurred siince we had our new server just before the summer break, so I KNOW it is something on there...somewhere...
The thing is that for the policy to apply to some groups and not others, the "disable" setting must be somewhere and I cannot find it.
13th September 2012, 09:57 AM #10
I have modelled a random child and a random staff member and can see no differences with respect to accessing USB drives etc. So, as I thought, it looks like it isnt done by group policy.
What else can I look at?
I need this sorted quickly because the staff are getting around it by logging on all the netbooks as staff so that the children can access the SD card. Obviously this is not good as the children can then access all sorts of things they shouldnt be able to , not forgetting profile corruption issues etc
13th September 2012, 09:59 AM #11
What does the event log say when a removable device is plugged in by a kid?
Originally Posted by witch
13th September 2012, 10:37 AM #12
13th September 2012, 11:58 AM #13
20th September 2012, 10:29 AM #14
Nothing happens when a child plugs in a USB.
Can anyone think of anything else I could look at? Getting a bit desperate here!
20th September 2012, 10:33 AM #15
login as a teacher, plug in a usb key then log off and back in as a student to see if it keeps it mapped.
Boot with USB in then logon as student to see if it shows up
Check in drive manager as a student to see if the drive exists when plugged in as a student.
By indiegirl in forum How do you do....it?
Last Post: 16th March 2012, 01:17 PM
By Dos_Box in forum How do you do....it?
Last Post: 27th April 2009, 06:42 PM
By kennysarmy in forum Virtual Learning Platforms
Last Post: 19th March 2009, 10:06 AM
By HPitkin in forum Network and Classroom Management
Last Post: 1st December 2008, 02:52 PM
By crc-ict in forum Windows
Last Post: 18th October 2007, 01:09 PM
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)