Create a security group “Deny USB” and add this group in the security settings of the GPO. There may be another task – you need to allow the use of external USB drives for everyone except a certain group of users. In the security settings editor, specify that the Domain Admins group is not allowed to apply this GPO ( Apply group policy – Deny).

Go to the Delegation tab and click the Advanced.

In the Security Filtering section, add the Domain Admins group.

Select your Disable USB Access policy in the Group Policy Management console.

Windows Portable Device – this class includes smartphones, tablets, players, etc.Īs you can see, you can deny the launch of executable files for each device class (protect computers against viruses), prohibit reading data and writing /editing files on external media.

All Removable Storage: Allow direct access in remote sessions.

All Removable Storage classes: Deny all access.

In the Removable Storage Access section, there are several policies allowing you to disable the use of different types of storage classes - CD/DVDs, FDD, USB-devices, tapes, etc. If you want to block USB storage devices for all computer users, you need to configure the settings in the “Computer Configuration” section.

Is denying access to your pc