Enable/allow specific USB storage device.

Question

1.00/5 (2 votes)

See more:

Hi Guys,

Looking for guidance or help on below scenario:-

1) USB in machines are blocked via GPO ie any storage devices can not be used in machines.
2) Mouse/Keyboard are working as they are not storage devices.
3) Would like to allow specific USB storage device by registry or at application run time but through code only, not from GPO.

Thanks in advance.

What I have tried:

Trying to find out the way...!

Posted 2-Jul-18 1:43am

Freelancers

Updated 2-Jul-18 5:35am

Add a Solution

3 solutions

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

Patrice T · Answer 1 · 2018-07-02T04:24:00

Solution 2

Quote:
Looking for guidance or help on below scenario:-

short answer: GPO is set for security reasons, you can bypass it if you have admin credentials.

Posted 2-Jul-18 4:24am

Patrice T

Dave Kreskowiak · Answer 2 · 2018-07-02T05:35:00

The only way to do that would be if the app was running as an admin account.

You'd be doing the same registry pokes as the GPO does.

The problem with your little idea is that there is no way to allow only a single device without allowing all devices of the same type to work once your app enables access for that device type.

Oh, and you have no way of stopping GPO refresh which will just put the registry values back to what they are supposed to be regardless of what you're app did to them.

Richard MacCutchan · Answer 3 · 2018-07-02T02:03:00

Solution 1

Group policy is setup for a reason. Most likely to stop people like you hacking corporate systems.

Posted 2-Jul-18 2:03am

Richard MacCutchan