+ Post New Thread
Results 1 to 15 of 15
Windows Thread, Another USB Topic in Technical; Forgive Me I have done several searches going on for the last hour, and I have not been able to ...
  1. #1

    Join Date
    Feb 2007
    Posts
    34
    Thank Post
    0
    Thanked 2 Times in 2 Posts
    Rep Power
    16

    Another USB Topic

    Forgive Me

    I have done several searches going on for the last hour, and I have not been able to find a definite answer, maybe I have, and I just missed it. I am at work also, so I have been getting interuptted with quick issues/questions. Anyways back to the question at hand.

    I would like this to be done through GP, if possible.

    Have a drive associated with a usb key. So everytime billy plugs his usb key in, it is always going to be a T: drive mapping.

    Secondly, I would like to block ALL exe files from being run from that drive letter.

    Can someone please help I have searchad, and searched and searched some more, for answers and was unscuccessful ops:

  2. Thanks to Gambit from:

    hawc (14th July 2013)

  3. #2

    Join Date
    Sep 2006
    Location
    Essex
    Posts
    785
    Thank Post
    1
    Thanked 34 Times in 32 Posts
    Rep Power
    24

    Re: Another USB Topic

    You could use the software restirction policy in GPO to block exe files on drive T: but you cannot associate a drive letter VIA GPO.

  4. #3

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,610
    Thank Post
    746
    Thanked 1,706 Times in 1,519 Posts
    Rep Power
    437

    Re: Another USB Topic

    I use usbdlm to manage what drive letter is associated to removable devices.

    Ben

  5. #4

    Join Date
    Oct 2006
    Location
    uk
    Posts
    494
    Thank Post
    19
    Thanked 3 Times in 2 Posts
    Rep Power
    17

    Re: Another USB Topic

    djm968 wrote "You could use the software restirction policy in GPO to block exe files on drive T: ."

    How mate? you little dancer if i can get this sorted (having already managed to map all usb pens to B:with usbdlm i'll be home and dry.

    @Gambit usbdlm is a doddle to use and works brilliantly google it and hopefully djm968 will fill in the rest of the gaps around the gpo bit.

  6. #5
    mark's Avatar
    Join Date
    Jun 2005
    Posts
    3,987
    Thank Post
    271
    Thanked 52 Times in 46 Posts
    Blog Entries
    2
    Rep Power
    48

    Re: Another USB Topic

    In the Machine Policy set the file types you want restricted (just enable software restrictions + add any if you like) and on the User Policy set the drive letter in Software resrictions > Additional Rules - you have to specify the drive letter - paths don't work.

  7. #6

    Join Date
    Sep 2006
    Location
    Essex
    Posts
    785
    Thank Post
    1
    Thanked 34 Times in 32 Posts
    Rep Power
    24

    Re: Another USB Topic

    I was just about to say.... :; Cheers Mark

  8. #7

    Join Date
    Feb 2007
    Posts
    34
    Thank Post
    0
    Thanked 2 Times in 2 Posts
    Rep Power
    16

    Re: Another USB Topic

    Thanks for all the help guys...

    I have finally got this setup and working as it should... Although I have noticed one issue that I cant figure out how to fix, I have googled it but no luck in finding any soultions. heres the issue

    Currently when a student tries to run an .exe file from the root of his/her usb drive it comes up with an error *good sign* but if they open a sub folder they can run .exe files without any issues *bad sign*. How do I deny all sub folders from running .exe files, just like what was done to the root??? Is this possible?

  9. #8
    tosca925's Avatar
    Join Date
    Aug 2005
    Location
    Midlands
    Posts
    1,547
    Thank Post
    4
    Thanked 4 Times in 4 Posts
    Rep Power
    22

    Re: Another USB Topic

    There is a way of doing it i think, I an sure i have read it on here somewhere when we were looking into it. I think if you search you'll find it. It may be to do with the file path in the software restriction policy. I guess you have blocked *.exe? Well i imagine you need to block file structures further down. So i guess its its defining the path in the restriction policy, but to be honest someone else will have to help you withthat as i am not sure how to get it right.

  10. #9

    Norphy's Avatar
    Join Date
    Jan 2006
    Location
    Harpenden
    Posts
    2,548
    Thank Post
    59
    Thanked 357 Times in 277 Posts
    Blog Entries
    7
    Rep Power
    130

    Re: Another USB Topic

    TBH, I think you're doing it backwards. By the sounds of it, you have it set up to "allow all except"

    It is much more effective to set it up to "deny all except". This means that only programs in predefined areas would be allowed thereby automatically denying anything store in (say) personal areas, removable drives, CDs and shared areas.

    By default, when you set up a deny SRP it allows everything in the Program Files and Windows folders to be run. You'd also need to allow %allusersprofile%, any shared application path you have (using the UNC, not the drive letter) and the NETLOGON share of your domain. There is a post on here which details the SRP we use at my place, I'll search it out.

    /edit here

  11. #10
    Kyle's Avatar
    Join Date
    Jan 2006
    Posts
    984
    Thank Post
    92
    Thanked 14 Times in 13 Posts
    Rep Power
    21

    Re: Another USB Topic


  12. #11
    tosca925's Avatar
    Join Date
    Aug 2005
    Location
    Midlands
    Posts
    1,547
    Thank Post
    4
    Thanked 4 Times in 4 Posts
    Rep Power
    22

    Re: Another USB Topic

    I use usbdlm to manage what drive letter is associated to removable devices
    Can this be installed through GPO inany way?

    I'd like to know how it can be done if possible or if anyone had installed this domain wide.

  13. #12
    mark's Avatar
    Join Date
    Jun 2005
    Posts
    3,987
    Thank Post
    271
    Thanked 52 Times in 46 Posts
    Blog Entries
    2
    Rep Power
    48

    Re: Another USB Topic

    Something I need to do too. The folder needs to be copied over to the %Program Files% folder and the batch file run from that folder to install and start the service - shouldn't be too hard.

  14. #13
    tosca925's Avatar
    Join Date
    Aug 2005
    Location
    Midlands
    Posts
    1,547
    Thank Post
    4
    Thanked 4 Times in 4 Posts
    Rep Power
    22

    Re: Another USB Topic

    Something I need to do too. The folder needs to be copied over to the %Program Files% folder and the batch file run from that folder to install and start the service - shouldn't be too hard.
    Keep me informed please mark

  15. #14
    mark's Avatar
    Join Date
    Jun 2005
    Posts
    3,987
    Thank Post
    271
    Thanked 52 Times in 46 Posts
    Blog Entries
    2
    Rep Power
    48

    Re: Another USB Topic

    k

  16. #15
    tosca925's Avatar
    Join Date
    Aug 2005
    Location
    Midlands
    Posts
    1,547
    Thank Post
    4
    Thanked 4 Times in 4 Posts
    Rep Power
    22

    Re: Another USB Topic

    Have a look at this post noww



SHARE:
+ Post New Thread

Similar Threads

  1. Bit off topic but...
    By Jake in forum General Chat
    Replies: 13
    Last Post: 7th June 2007, 09:07 AM
  2. BSF Topic
    By Grommit in forum BSF
    Replies: 24
    Last Post: 12th December 2006, 01:30 AM
  3. New Topic
    By 20RickY06 in forum General Chat
    Replies: 9
    Last Post: 5th September 2006, 09:09 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •