+ Post New Thread
Page 1 of 3 123 LastLast
Results 1 to 15 of 33
Windows Server 2008 R2 Thread, Students denied access to usb in Technical; I'm sure this is an easily answered question. My server is currently set up so that students cannot access anything ...
  1. #1

    witch's Avatar
    Join Date
    Nov 2005
    Location
    Dorset
    Posts
    11,106
    Thank Post
    1,363
    Thanked 2,317 Times in 1,630 Posts
    Rep Power
    693

    Students denied access to usb

    I'm sure this is an easily answered question.
    My server is currently set up so that students cannot access anything plugged into a USB. The item is installed and you can see the folders but get an 'access denied' if you try to click.
    This is a pain as we have video cameras that the children are using for various projects but currently they cant access their films etc, a staff member has to sort it out and put the files on a shared area.
    Can someone tell me where this setting will be? And if I sort it out, I would like to deny the students the possibility of running any .exes off their usb sticks.

    I found the bit under computer configuration - \User Configuration\Policies\Administrative Templates\System\Removable Storage Access but it is not configured so I dont think this is where the restriction is coming from.
    Staff can use usb so there must be something different somewhere!
    Last edited by witch; 3rd July 2012 at 08:11 AM.

  2. #2

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,039
    Thank Post
    852
    Thanked 2,666 Times in 2,263 Posts
    Blog Entries
    9
    Rep Power
    767
    Can you run RSoP snapin in mmc to see all the applied settings then filter it by the term usb

  3. #3

    AngryTechnician's Avatar
    Join Date
    Oct 2008
    Posts
    3,730
    Thank Post
    698
    Thanked 1,211 Times in 761 Posts
    Rep Power
    394
    Have you run RSoP on an affected workstation and user to see if its hidden in another policy somewhere?

    Edit: What he said ^

  4. #4

    Join Date
    Feb 2007
    Location
    Stockport
    Posts
    852
    Thank Post
    258
    Thanked 105 Times in 81 Posts
    Rep Power
    39
    Hi Witch,

    Don't know if any use of not, but we do USB blocking through our AV.

  5. #5

    witch's Avatar
    Join Date
    Nov 2005
    Location
    Dorset
    Posts
    11,106
    Thank Post
    1,363
    Thanked 2,317 Times in 1,630 Posts
    Rep Power
    693
    Definitely not done that way here. I just cant see where it is done. We have separate staff and student gpos and logic would say that that would be where to find the restriction, but apparently not!

  6. #6

    witch's Avatar
    Join Date
    Nov 2005
    Location
    Dorset
    Posts
    11,106
    Thank Post
    1,363
    Thanked 2,317 Times in 1,630 Posts
    Rep Power
    693
    Quote Originally Posted by AngryTechnician View Post
    Have you run RSoP on an affected workstation and user to see if its hidden in another policy somewhere?

    Edit: What he said ^
    What is that? Where do I find it?

    (it's done by user, not computer, definitely)

  7. #7

    Steve21's Avatar
    Join Date
    Feb 2011
    Location
    Swindon
    Posts
    2,689
    Thank Post
    334
    Thanked 515 Times in 483 Posts
    Rep Power
    179
    Quote Originally Posted by witch View Post
    What is that? Where do I find it?
    rsop.msc (Run it from start menu, or go and add it as a snapin to normal management msc)

    Steve

  8. #8

    witch's Avatar
    Join Date
    Nov 2005
    Location
    Dorset
    Posts
    11,106
    Thank Post
    1,363
    Thanked 2,317 Times in 1,630 Posts
    Rep Power
    693
    Quote Originally Posted by Steve21 View Post
    rsop.msc (Run it from start menu, or go and add it as a snapin to normal management msc)

    Steve
    Sorry, no clue..I have added it I think. Now what? Start menu on what?
    Last edited by witch; 3rd July 2012 at 08:35 AM.

  9. #9

    Steve21's Avatar
    Join Date
    Feb 2011
    Location
    Swindon
    Posts
    2,689
    Thank Post
    334
    Thanked 515 Times in 483 Posts
    Rep Power
    179
    Quote Originally Posted by witch View Post
    Sorry, no clue...How do I add it? Run it from start menu where?
    Start box thingy, Run box (Or "Run button" if XP I guess)

    Either rsop.msc to go straight to it, or mmc to get to management console, then add the snapin.

    Steve

  10. #10

    witch's Avatar
    Join Date
    Nov 2005
    Location
    Dorset
    Posts
    11,106
    Thank Post
    1,363
    Thanked 2,317 Times in 1,630 Posts
    Rep Power
    693
    I have added it but now it is asking where to save it - and the technet doc I am following doesnt mention that - help?

    And if I try to run it I get an RSP server not available error
    Last edited by witch; 3rd July 2012 at 08:39 AM.

  11. #11

    Steve21's Avatar
    Join Date
    Feb 2011
    Location
    Swindon
    Posts
    2,689
    Thank Post
    334
    Thanked 515 Times in 483 Posts
    Rep Power
    179
    You shouldn't need to save it, that's only saving the layout in MMC. If you right click the rsop, and generate data, you can pick the user it'll run under (those who have logged onto it before), and it'll list the policies that applied to them.

    Steve

  12. #12

    witch's Avatar
    Join Date
    Nov 2005
    Location
    Dorset
    Posts
    11,106
    Thank Post
    1,363
    Thanked 2,317 Times in 1,630 Posts
    Rep Power
    693
    If I run it from the computer it only gives me the settings for the current user. What am I missing? I need to see the student settings
    Last edited by witch; 3rd July 2012 at 08:53 AM.

  13. #13

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,039
    Thank Post
    852
    Thanked 2,666 Times in 2,263 Posts
    Blog Entries
    9
    Rep Power
    767
    Run it on a client, when you generate data you can pick the user to generate it for, as long as a student has logged on to the machine before they should be on the list.

  14. #14

    witch's Avatar
    Join Date
    Nov 2005
    Location
    Dorset
    Posts
    11,106
    Thank Post
    1,363
    Thanked 2,317 Times in 1,630 Posts
    Rep Power
    693
    What list? When I type it in to a computer, I get a window giving me the username - which is me and not a student, and then it resolves into what looks like the standard "edit" screen you get when looking at a policy - Computer config, user config and all this. I am obviously doing something wrong but I cant see what

  15. #15

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,039
    Thank Post
    852
    Thanked 2,666 Times in 2,263 Posts
    Blog Entries
    9
    Rep Power
    767
    new plan, 2008r2 also has gpo modelling, its an option in the group policy management snapin, this should let you pick a user and machine to test for.

SHARE:
+ Post New Thread
Page 1 of 3 123 LastLast

Similar Threads

  1. Denied Access to Playback and Recording Devices
    By vehmeier in forum Windows Vista
    Replies: 2
    Last Post: 9th March 2010, 01:56 PM
  2. Deny access to RDP & CMD
    By mcloum in forum Wireless Networks
    Replies: 10
    Last Post: 12th January 2009, 01:50 PM
  3. Licensing issues associated with student remote access to terminal servers
    By meastaugh1 in forum Thin Client and Virtual Machines
    Replies: 2
    Last Post: 24th October 2008, 11:56 AM
  4. Restrict Access To USB Devices
    By MuppetQueen in forum Wireless Networks
    Replies: 25
    Last Post: 15th December 2005, 04:53 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •