+ Post New Thread
Page 1 of 3 123 LastLast
Results 1 to 15 of 33
Windows Server 2008 R2 Thread, Students denied access to usb in Technical; I'm sure this is an easily answered question. My server is currently set up so that students cannot access anything ...
  1. #1

    witch's Avatar
    Join Date
    Nov 2005
    Location
    Dorset
    Posts
    10,405
    Thank Post
    1,106
    Thanked 2,094 Times in 1,474 Posts
    Rep Power
    651

    Students denied access to usb

    I'm sure this is an easily answered question.
    My server is currently set up so that students cannot access anything plugged into a USB. The item is installed and you can see the folders but get an 'access denied' if you try to click.
    This is a pain as we have video cameras that the children are using for various projects but currently they cant access their films etc, a staff member has to sort it out and put the files on a shared area.
    Can someone tell me where this setting will be? And if I sort it out, I would like to deny the students the possibility of running any .exes off their usb sticks.

    I found the bit under computer configuration - \User Configuration\Policies\Administrative Templates\System\Removable Storage Access but it is not configured so I dont think this is where the restriction is coming from.
    Staff can use usb so there must be something different somewhere!
    Last edited by witch; 3rd July 2012 at 08:11 AM.

  2. #2

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    10,691
    Thank Post
    824
    Thanked 2,570 Times in 2,187 Posts
    Blog Entries
    9
    Rep Power
    731
    Can you run RSoP snapin in mmc to see all the applied settings then filter it by the term usb

  3. #3

    AngryTechnician's Avatar
    Join Date
    Oct 2008
    Posts
    3,724
    Thank Post
    695
    Thanked 1,206 Times in 759 Posts
    Rep Power
    393
    Have you run RSoP on an affected workstation and user to see if its hidden in another policy somewhere?

    Edit: What he said ^

  4. #4

    Join Date
    Feb 2007
    Location
    Stockport
    Posts
    806
    Thank Post
    237
    Thanked 90 Times in 75 Posts
    Rep Power
    35
    Hi Witch,

    Don't know if any use of not, but we do USB blocking through our AV.

  5. #5

    witch's Avatar
    Join Date
    Nov 2005
    Location
    Dorset
    Posts
    10,405
    Thank Post
    1,106
    Thanked 2,094 Times in 1,474 Posts
    Rep Power
    651
    Definitely not done that way here. I just cant see where it is done. We have separate staff and student gpos and logic would say that that would be where to find the restriction, but apparently not!

  6. #6

    witch's Avatar
    Join Date
    Nov 2005
    Location
    Dorset
    Posts
    10,405
    Thank Post
    1,106
    Thanked 2,094 Times in 1,474 Posts
    Rep Power
    651
    Quote Originally Posted by AngryTechnician View Post
    Have you run RSoP on an affected workstation and user to see if its hidden in another policy somewhere?

    Edit: What he said ^
    What is that? Where do I find it?

    (it's done by user, not computer, definitely)

  7. #7

    Steve21's Avatar
    Join Date
    Feb 2011
    Location
    Swindon
    Posts
    2,656
    Thank Post
    324
    Thanked 506 Times in 474 Posts
    Rep Power
    177
    Quote Originally Posted by witch View Post
    What is that? Where do I find it?
    rsop.msc (Run it from start menu, or go and add it as a snapin to normal management msc)

    Steve

  8. #8

    witch's Avatar
    Join Date
    Nov 2005
    Location
    Dorset
    Posts
    10,405
    Thank Post
    1,106
    Thanked 2,094 Times in 1,474 Posts
    Rep Power
    651
    Quote Originally Posted by Steve21 View Post
    rsop.msc (Run it from start menu, or go and add it as a snapin to normal management msc)

    Steve
    Sorry, no clue..I have added it I think. Now what? Start menu on what?
    Last edited by witch; 3rd July 2012 at 08:35 AM.

  9. #9

    Steve21's Avatar
    Join Date
    Feb 2011
    Location
    Swindon
    Posts
    2,656
    Thank Post
    324
    Thanked 506 Times in 474 Posts
    Rep Power
    177
    Quote Originally Posted by witch View Post
    Sorry, no clue...How do I add it? Run it from start menu where?
    Start box thingy, Run box (Or "Run button" if XP I guess)

    Either rsop.msc to go straight to it, or mmc to get to management console, then add the snapin.

    Steve

  10. #10

    witch's Avatar
    Join Date
    Nov 2005
    Location
    Dorset
    Posts
    10,405
    Thank Post
    1,106
    Thanked 2,094 Times in 1,474 Posts
    Rep Power
    651
    I have added it but now it is asking where to save it - and the technet doc I am following doesnt mention that - help?

    And if I try to run it I get an RSP server not available error
    Last edited by witch; 3rd July 2012 at 08:39 AM.

  11. #11

    Steve21's Avatar
    Join Date
    Feb 2011
    Location
    Swindon
    Posts
    2,656
    Thank Post
    324
    Thanked 506 Times in 474 Posts
    Rep Power
    177
    You shouldn't need to save it, that's only saving the layout in MMC. If you right click the rsop, and generate data, you can pick the user it'll run under (those who have logged onto it before), and it'll list the policies that applied to them.

    Steve

  12. #12

    witch's Avatar
    Join Date
    Nov 2005
    Location
    Dorset
    Posts
    10,405
    Thank Post
    1,106
    Thanked 2,094 Times in 1,474 Posts
    Rep Power
    651
    If I run it from the computer it only gives me the settings for the current user. What am I missing? I need to see the student settings
    Last edited by witch; 3rd July 2012 at 08:53 AM.

  13. #13

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    10,691
    Thank Post
    824
    Thanked 2,570 Times in 2,187 Posts
    Blog Entries
    9
    Rep Power
    731
    Run it on a client, when you generate data you can pick the user to generate it for, as long as a student has logged on to the machine before they should be on the list.

  14. #14

    witch's Avatar
    Join Date
    Nov 2005
    Location
    Dorset
    Posts
    10,405
    Thank Post
    1,106
    Thanked 2,094 Times in 1,474 Posts
    Rep Power
    651
    What list? When I type it in to a computer, I get a window giving me the username - which is me and not a student, and then it resolves into what looks like the standard "edit" screen you get when looking at a policy - Computer config, user config and all this. I am obviously doing something wrong but I cant see what

  15. #15

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    10,691
    Thank Post
    824
    Thanked 2,570 Times in 2,187 Posts
    Blog Entries
    9
    Rep Power
    731
    new plan, 2008r2 also has gpo modelling, its an option in the group policy management snapin, this should let you pick a user and machine to test for.

SHARE:
+ Post New Thread
Page 1 of 3 123 LastLast

Similar Threads

  1. Denied Access to Playback and Recording Devices
    By vehmeier in forum Windows Vista
    Replies: 2
    Last Post: 9th March 2010, 01:56 PM
  2. Deny access to RDP & CMD
    By mcloum in forum Wireless Networks
    Replies: 10
    Last Post: 12th January 2009, 01:50 PM
  3. Licensing issues associated with student remote access to terminal servers
    By meastaugh1 in forum Thin Client and Virtual Machines
    Replies: 2
    Last Post: 24th October 2008, 11:56 AM
  4. Restrict Access To USB Devices
    By MuppetQueen in forum Wireless Networks
    Replies: 25
    Last Post: 15th December 2005, 04:53 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •