Can we disable USB access with “User configuration” GPO

active-directorygroup-policy

I have a requirement to disable/enable the user access to Computer USB via GPO and they want to control it with User configuration not computer configuration.

Is this a possibility with Windows GPO?
else what is the best way i can enable this?

any help.Appreciated.

TR/pasha//

Best Answer

Yes, you can. The policy to "disable USB access" is found in Group Policy Management Editor \ User Configuration \ Administrative Templates \ System \ Removable Storage Access \ All Removable Storage classes: Deny All Access. Enabling this policy (linked to your desired OU) will block all removable storage devices, i.e., USB Sticks, DVD Drive's.