Quote:
Originally Posted by audit
I have the admin's in a separate OU and a different GPO so it doesn't affect us. And I do agree that it affects the local admin but I don't have my network setup where it would affect them. I just don't want the USB ports enabled at all.
|
I was thinking about this today, while at a client's in stalling a new Dell Vostro. Much of what used to have other ports has now gone to USB, specifically the keyboard, mouse, printer. The things that aren't USB are now just the display, speaker, and network. Creating a GPO turning off USB would render these PCs useless, or at least damned difficult to work. Now I'm wondering if there's some way to set a policy so that that disk device won't be allowed, but other devices would still be usable.