Saturday, April 27, 2013

Deny All Access to Removable Devices or Media

  1. Open the Group Policy Management Editor. To do so, click Start, and then in the Start Search box, type mmc gpedit.msc.
  2. In the navigation pane, open Local Computer Policy. Then do one of the following:
  • If you want the policy to affect all users on the computer, open Computer Configuration in the navigation pane.
  • If you want the policy to affect only the currently logged on user, open User Configuration in the navigation pane.
     3. Continue by opening the following folders: Administrative Templates, System, and
         Removable Storage Access.
     4. In the details pane, double-click All Removable Storage classes: Deny all access.
     5. Click Enabled.
     6. Click OK to save your changes.

**** Membership in the local Administrators group, or equivalent, is the minimum required to complete this procedure. ****