I'm trying to lock down and secure some of my computers, and I've been able to disable USB Mass Storage. However, I can connect my phone and it still acts like a mass storage, but it uses the MTP protocol. I can't simply disable all USB ports, since I have USB keyboards and mice. I was given advice by a friend that the way he usually solves this issue is simply super gluing the USB ports shut. This sounds a bit extreme. What are my options?
-
2How did you disable the USB Mass Storage? Are you sure that's working? (IE: if you plug a regular USB flash drive in right now, does it get blocked?)– Ƭᴇcʜιᴇ007Oct 17, 2012 at 16:02
-
1Related from over on ServerFault: Disable writing to “portable media player”– Ƭᴇcʜιᴇ007Oct 17, 2012 at 16:09
-
@techie007 Yes, I've tested it thoroughly. Mass storage is in its entirety disabled.– DriseOct 17, 2012 at 16:17
-
Surely this can be done in the group policy editor.– MoabOct 17, 2012 at 17:08
-
@Moab Not that I've found. Unless I missed something.– DriseOct 17, 2012 at 17:11
Add a comment
|
2 Answers
Try by setting the policy WPD Devices: Deny read access
within System\Removable Storage Access
to "Enabled" and this should block all the portable devices.
This is not an elegant solution and would have to be performed for each MTP device, by changing the driver used by the device you can have it use the usb mass storage driver, which you have blocked.
http://eugeneboon.com/the-quickest-way-to-disable-mtp-media-player/
-
-
Feel free to edit my answer and include the info, I will do it when I have time.– MoabOct 18, 2012 at 1:51