+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 20
Windows Server 2008 R2 Thread, How to enable USB/SD etc for students in Technical; I must be missing something but I cant see what. I have been asked to enable the usb and sd ...
  1. #1

    witch's Avatar
    Join Date
    Nov 2005
    Location
    Dorset
    Posts
    11,050
    Thank Post
    1,318
    Thanked 2,310 Times in 1,624 Posts
    Rep Power
    692

    How to enable USB/SD etc for students

    I must be missing something but I cant see what. I have been asked to enable the usb and sd card facility for students but for the life of me I cant find the policy that has disabled it!
    Currently staff can access removeable storage but students cannot.
    So my thinking is that the disabling must happen in a policy that only applies to the students.

    We have a 'students' policy that is the only one directly applied to student users but it isnt in there. All other policies are applied to either more than one group of people, or to computers.
    Any ideas where else I could be looking?

  2. #2
    VeryPC_Tom_M's Avatar
    Join Date
    Aug 2012
    Location
    Sheffield
    Posts
    388
    Thank Post
    14
    Thanked 82 Times in 79 Posts
    Rep Power
    44
    I'd try looking in

    Computer Configuration - Administrative Templates - System - Removable Storage Access

    and

    Computer Configuration - Administrative Templates - System - Device Installation - Device Installation Restriction

    They're the locations which pop into mind when restricting access to removable storage.

  3. #3

    witch's Avatar
    Join Date
    Nov 2005
    Location
    Dorset
    Posts
    11,050
    Thank Post
    1,318
    Thanked 2,310 Times in 1,624 Posts
    Rep Power
    692
    Thanks, but it cant be in Computer Configuration, it has to be User, doesnt it? Staff can access drives wherever they are.
    I was looking in removeable storage access.

    I have had a look at installation and nothing is configured anyway.
    No drives are hidden anywhere either

  4. #4

    witch's Avatar
    Join Date
    Nov 2005
    Location
    Dorset
    Posts
    11,050
    Thank Post
    1,318
    Thanked 2,310 Times in 1,624 Posts
    Rep Power
    692
    Someone must know. I have looked through every single policy (clutching at straws, here) and nowhere is access to removeable storage disabled. So it is somewhere else?
    As I said, Staff can access such things but students cant.

    There is something I am missing - but what?

  5. #5

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    10,991
    Thank Post
    851
    Thanked 2,653 Times in 2,253 Posts
    Blog Entries
    9
    Rep Power
    764
    Could it be in the AV software, I know that some can happily block user access to all sorts of stuff based on the group.

    I'd also do an RSoP for a student and a teacher then have a compare (or use GPO modelling in the group policy management thing in 2008 R2 which is probably easier).

  6. #6


    Join Date
    Dec 2005
    Location
    In the server room, with the lead pipe.
    Posts
    4,619
    Thank Post
    275
    Thanked 777 Times in 604 Posts
    Rep Power
    223
    Loopback policy on the OU triggered by security group membership? (filter policy by security group - if you're a kid it applies, if staff it doesn't?)

    What does Group Policy modelling show?

    GPMC > Group Policy Modeling (second from bottom) - model against a kid on randomcomputer01, then against a member of staff on randomcomputer02 and compare.

    You can also do stuff with device drivers and security groups (well, on XP at least you can).

  7. #7

    Join Date
    Dec 2007
    Posts
    863
    Thank Post
    90
    Thanked 164 Times in 139 Posts
    Rep Power
    49
    Are you using USBDLM to control devices/ports?

  8. #8
    Ergo's Avatar
    Join Date
    Sep 2012
    Location
    Nottingham
    Posts
    111
    Thank Post
    16
    Thanked 26 Times in 25 Posts
    Rep Power
    8
    Could it be simply that you have drive letters hidden for students which includes the drive letters which would be used by the removable devices? Off the top of my head I could not direct you to the policies, but something like:

    User -> Policies -> Windows -> Explorer -> Hide all drive letters except...

    David Irwin

  9. #9

    witch's Avatar
    Join Date
    Nov 2005
    Location
    Dorset
    Posts
    11,050
    Thank Post
    1,318
    Thanked 2,310 Times in 1,624 Posts
    Rep Power
    692
    Drive letters not hidden - well, only the C drive as you would expect
    Definitely not the antivirus
    Dont know if I am using USBDLM - how do I tell?
    Will look at Group Policy Modelling tomorrow
    The machines are all windows 7 and this has only occurred siince we had our new server just before the summer break, so I KNOW it is something on there...somewhere...
    The thing is that for the policy to apply to some groups and not others, the "disable" setting must be somewhere and I cannot find it.

  10. #10

    witch's Avatar
    Join Date
    Nov 2005
    Location
    Dorset
    Posts
    11,050
    Thank Post
    1,318
    Thanked 2,310 Times in 1,624 Posts
    Rep Power
    692
    I have modelled a random child and a random staff member and can see no differences with respect to accessing USB drives etc. So, as I thought, it looks like it isnt done by group policy.
    What else can I look at?
    I need this sorted quickly because the staff are getting around it by logging on all the netbooks as staff so that the children can access the SD card. Obviously this is not good as the children can then access all sorts of things they shouldnt be able to , not forgetting profile corruption issues etc

  11. #11


    Join Date
    Dec 2005
    Location
    In the server room, with the lead pipe.
    Posts
    4,619
    Thank Post
    275
    Thanked 777 Times in 604 Posts
    Rep Power
    223
    Quote Originally Posted by witch View Post
    I have modelled a random child and a random staff member and can see no differences with respect to accessing USB drives etc. So, as I thought, it looks like it isnt done by group policy.
    What else can I look at?
    I need this sorted quickly because the staff are getting around it by logging on all the netbooks as staff so that the children can access the SD card. Obviously this is not good as the children can then access all sorts of things they shouldnt be able to , not forgetting profile corruption issues etc
    What does the event log say when a removable device is plugged in by a kid?

  12. #12
    Mcshammer_dj's Avatar
    Join Date
    Feb 2007
    Location
    Portsmouth
    Posts
    921
    Thank Post
    35
    Thanked 160 Times in 129 Posts
    Rep Power
    56
    are you using sophos

  13. #13

    witch's Avatar
    Join Date
    Nov 2005
    Location
    Dorset
    Posts
    11,050
    Thank Post
    1,318
    Thanked 2,310 Times in 1,624 Posts
    Rep Power
    692
    No Sophos - NOD32 here

  14. #14

    witch's Avatar
    Join Date
    Nov 2005
    Location
    Dorset
    Posts
    11,050
    Thank Post
    1,318
    Thanked 2,310 Times in 1,624 Posts
    Rep Power
    692
    Nothing happens when a child plugs in a USB.
    Can anyone think of anything else I could look at? Getting a bit desperate here!

  15. #15

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    10,991
    Thank Post
    851
    Thanked 2,653 Times in 2,253 Posts
    Blog Entries
    9
    Rep Power
    764
    login as a teacher, plug in a usb key then log off and back in as a student to see if it keeps it mapped.

    Boot with USB in then logon as student to see if it shows up

    Check in drive manager as a student to see if the drive exists when plugged in as a student.

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. How to find out which machine a student logged onto, & when
    By indiegirl in forum How do you do....it?
    Replies: 32
    Last Post: 16th March 2012, 01:17 PM
  2. How to create a certificate request for an Exchange 2007 UCC
    By Dos_Box in forum How do you do....it?
    Replies: 11
    Last Post: 27th April 2009, 06:42 PM
  3. Hosted Moodle..how to setup with Courses etc.
    By kennysarmy in forum Virtual Learning Platforms
    Replies: 2
    Last Post: 19th March 2009, 10:06 AM
  4. How to change display font size for all users of certain laptops?
    By HPitkin in forum Network and Classroom Management
    Replies: 2
    Last Post: 1st December 2008, 02:52 PM
  5. Replies: 13
    Last Post: 18th October 2007, 01:09 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •