Windows Server R2 Domain control Group Policy settings Disable USB

Problem:

Windows Server R2 How the domain control server disables clients using USB Removable Storage (client operating system requires

Operating systems above Windows Vista, the operating system below XP cannot disable USB Removable Storage.

Callout: disabling USB Removable Storage device requirements for Windows Server R2 Domain Group Policy is a client operating system that requires more than Windows Vista, and operating systems that are under XP can only use Windows Server The 2003 operating system can be restricted as a domain control server (not the same as the Windows Server R2 operation method). I have repeatedly failed the Windows Server R2 Domain control experiment to limit the XP system USB Removable Storage. So, here only for Windows Vista OS above (also including the win 7/8/10 operating system).

Workaround:

1. Open the Active Directory user and machine catalog----Select the Computers organizational unit------Right-testname the client computer----move.

2, select the Zhuyu organizational unit----determined.

3. To see if the TestName client computer has been moved to the Zhuyu organizational unit, create a test domain user user1. (Domain user creation is no longer operational here)

4. Start----Run----input gpmc.msc----Right-click Group Policy Object-----New.

5. Define a Group Policy name of "Disable USB"----OK.

6. Right-click to select the "Disable USB" Group Policy----edit.

7. Calculation configuration----Administrative Templates----system----Removable Storage access----Double-click all Removable Storage classes: Deny all permissions.

8. Select Enabled----OK.

9. Right-click the Zhuyu organizational unit----Link an existing GPO.

10, select the domain control zhuyu.com----Group Policy Object Select "Disable USB"----OK.

11. Zhuyu The Organizational Unit link GPO to the "Disable USB" Group Policy.

12. Start---run----input gpupdate/force----Group Policy update complete.

13, because the configuration of the Computer configuration is Group Policy, the client needs to restart the system after the "Disable USB" policy to produce, testname client double-click the USB prompt cannot be accessed.

Windows Server R2 Domain control Group Policy settings Disable USB