1

I'm trying to lock down and secure some of my computers, and I've been able to disable USB Mass Storage. However, I can connect my phone and it still acts like a mass storage, but it uses the MTP protocol. I can't simply disable all USB ports, since I have USB keyboards and mice. I was given advice by a friend that the way he usually solves this issue is simply super gluing the USB ports shut. This sounds a bit extreme. What are my options?

5
  • 2
    How did you disable the USB Mass Storage? Are you sure that's working? (IE: if you plug a regular USB flash drive in right now, does it get blocked?) Oct 17, 2012 at 16:02
  • 1
    Related from over on ServerFault: Disable writing to “portable media player” Oct 17, 2012 at 16:09
  • @techie007 Yes, I've tested it thoroughly. Mass storage is in its entirety disabled.
    – Drise
    Oct 17, 2012 at 16:17
  • Surely this can be done in the group policy editor.
    – Moab
    Oct 17, 2012 at 17:08
  • @Moab Not that I've found. Unless I missed something.
    – Drise
    Oct 17, 2012 at 17:11

2 Answers 2

4

Try by setting the policy WPD Devices: Deny read access within System\Removable Storage Access to "Enabled" and this should block all the portable devices.

-1

This is not an elegant solution and would have to be performed for each MTP device, by changing the driver used by the device you can have it use the usb mass storage driver, which you have blocked.

http://eugeneboon.com/the-quickest-way-to-disable-mtp-media-player/

2
  • No danger of link rot here?
    – Karan
    Oct 17, 2012 at 22:08
  • Feel free to edit my answer and include the info, I will do it when I have time.
    – Moab
    Oct 18, 2012 at 1:51

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .