+ Post New Thread
Page 1 of 3 123 LastLast
Results 1 to 15 of 33
Windows Server 2008 R2 Thread, Students denied access to usb in Technical; I'm sure this is an easily answered question. My server is currently set up so that students cannot access anything ...
  1. #1

    witch's Avatar
    Join Date
    Nov 2005
    Location
    Dorset
    Posts
    11,521
    Thank Post
    1,532
    Thanked 2,639 Times in 1,827 Posts
    Rep Power
    814

    Students denied access to usb

    I'm sure this is an easily answered question.
    My server is currently set up so that students cannot access anything plugged into a USB. The item is installed and you can see the folders but get an 'access denied' if you try to click.
    This is a pain as we have video cameras that the children are using for various projects but currently they cant access their films etc, a staff member has to sort it out and put the files on a shared area.
    Can someone tell me where this setting will be? And if I sort it out, I would like to deny the students the possibility of running any .exes off their usb sticks.

    I found the bit under computer configuration - \User Configuration\Policies\Administrative Templates\System\Removable Storage Access but it is not configured so I dont think this is where the restriction is coming from.
    Staff can use usb so there must be something different somewhere!
    Last edited by witch; 3rd July 2012 at 09:11 AM.

  2. #2

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,271
    Thank Post
    884
    Thanked 2,749 Times in 2,322 Posts
    Blog Entries
    11
    Rep Power
    785
    Can you run RSoP snapin in mmc to see all the applied settings then filter it by the term usb

  3. #3

    AngryTechnician's Avatar
    Join Date
    Oct 2008
    Posts
    3,730
    Thank Post
    698
    Thanked 1,214 Times in 761 Posts
    Rep Power
    395
    Have you run RSoP on an affected workstation and user to see if its hidden in another policy somewhere?

    Edit: What he said ^

  4. #4

    Join Date
    Feb 2007
    Location
    Stockport
    Posts
    918
    Thank Post
    274
    Thanked 125 Times in 95 Posts
    Rep Power
    42
    Hi Witch,

    Don't know if any use of not, but we do USB blocking through our AV.

  5. #5

    witch's Avatar
    Join Date
    Nov 2005
    Location
    Dorset
    Posts
    11,521
    Thank Post
    1,532
    Thanked 2,639 Times in 1,827 Posts
    Rep Power
    814
    Definitely not done that way here. I just cant see where it is done. We have separate staff and student gpos and logic would say that that would be where to find the restriction, but apparently not!

  6. #6

    witch's Avatar
    Join Date
    Nov 2005
    Location
    Dorset
    Posts
    11,521
    Thank Post
    1,532
    Thanked 2,639 Times in 1,827 Posts
    Rep Power
    814
    Quote Originally Posted by AngryTechnician View Post
    Have you run RSoP on an affected workstation and user to see if its hidden in another policy somewhere?

    Edit: What he said ^
    What is that? Where do I find it?

    (it's done by user, not computer, definitely)

  7. #7

    Steve21's Avatar
    Join Date
    Feb 2011
    Location
    Swindon
    Posts
    2,824
    Thank Post
    372
    Thanked 544 Times in 507 Posts
    Rep Power
    184
    Quote Originally Posted by witch View Post
    What is that? Where do I find it?
    rsop.msc (Run it from start menu, or go and add it as a snapin to normal management msc)

    Steve

  8. #8

    witch's Avatar
    Join Date
    Nov 2005
    Location
    Dorset
    Posts
    11,521
    Thank Post
    1,532
    Thanked 2,639 Times in 1,827 Posts
    Rep Power
    814
    Quote Originally Posted by Steve21 View Post
    rsop.msc (Run it from start menu, or go and add it as a snapin to normal management msc)

    Steve
    Sorry, no clue..I have added it I think. Now what? Start menu on what?
    Last edited by witch; 3rd July 2012 at 09:35 AM.

  9. #9

    Steve21's Avatar
    Join Date
    Feb 2011
    Location
    Swindon
    Posts
    2,824
    Thank Post
    372
    Thanked 544 Times in 507 Posts
    Rep Power
    184
    Quote Originally Posted by witch View Post
    Sorry, no clue...How do I add it? Run it from start menu where?
    Start box thingy, Run box (Or "Run button" if XP I guess)

    Either rsop.msc to go straight to it, or mmc to get to management console, then add the snapin.

    Steve

  10. #10

    witch's Avatar
    Join Date
    Nov 2005
    Location
    Dorset
    Posts
    11,521
    Thank Post
    1,532
    Thanked 2,639 Times in 1,827 Posts
    Rep Power
    814
    I have added it but now it is asking where to save it - and the technet doc I am following doesnt mention that - help?

    And if I try to run it I get an RSP server not available error
    Last edited by witch; 3rd July 2012 at 09:39 AM.

  11. #11

    Steve21's Avatar
    Join Date
    Feb 2011
    Location
    Swindon
    Posts
    2,824
    Thank Post
    372
    Thanked 544 Times in 507 Posts
    Rep Power
    184
    You shouldn't need to save it, that's only saving the layout in MMC. If you right click the rsop, and generate data, you can pick the user it'll run under (those who have logged onto it before), and it'll list the policies that applied to them.

    Steve

  12. #12

    witch's Avatar
    Join Date
    Nov 2005
    Location
    Dorset
    Posts
    11,521
    Thank Post
    1,532
    Thanked 2,639 Times in 1,827 Posts
    Rep Power
    814
    If I run it from the computer it only gives me the settings for the current user. What am I missing? I need to see the student settings
    Last edited by witch; 3rd July 2012 at 09:53 AM.

  13. #13

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,271
    Thank Post
    884
    Thanked 2,749 Times in 2,322 Posts
    Blog Entries
    11
    Rep Power
    785
    Run it on a client, when you generate data you can pick the user to generate it for, as long as a student has logged on to the machine before they should be on the list.

  14. #14

    witch's Avatar
    Join Date
    Nov 2005
    Location
    Dorset
    Posts
    11,521
    Thank Post
    1,532
    Thanked 2,639 Times in 1,827 Posts
    Rep Power
    814
    What list? When I type it in to a computer, I get a window giving me the username - which is me and not a student, and then it resolves into what looks like the standard "edit" screen you get when looking at a policy - Computer config, user config and all this. I am obviously doing something wrong but I cant see what

  15. #15

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,271
    Thank Post
    884
    Thanked 2,749 Times in 2,322 Posts
    Blog Entries
    11
    Rep Power
    785
    new plan, 2008r2 also has gpo modelling, its an option in the group policy management snapin, this should let you pick a user and machine to test for.



SHARE:
+ Post New Thread
Page 1 of 3 123 LastLast

Similar Threads

  1. Denied Access to Playback and Recording Devices
    By vehmeier in forum Windows Vista
    Replies: 2
    Last Post: 9th March 2010, 02:56 PM
  2. Deny access to RDP & CMD
    By mcloum in forum Wireless Networks
    Replies: 10
    Last Post: 12th January 2009, 02:50 PM
  3. Licensing issues associated with student remote access to terminal servers
    By meastaugh1 in forum Thin Client and Virtual Machines
    Replies: 2
    Last Post: 24th October 2008, 12:56 PM
  4. Restrict Access To USB Devices
    By MuppetQueen in forum Wireless Networks
    Replies: 25
    Last Post: 15th December 2005, 05:53 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •