Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

There are several questions here about disabling USB storage in general via GPO but I can find no information on whether it is possible to add exceptions for specific devices. Put another way, can USB drive types that include builtin encryption be enabled but generic USB drives disabled?

This needs to work on Windows XP.

share|improve this question

Checkpoint have a product that we use called Pointsec Protector. This does a whole load of policy enforcement for USB connections (and optionally CD/DVD too) which we use for our XP machines.

We use it to enforce that all company USB sticks are properly encrypted to a decent level (with decryption keys accessible by the helpdesk for when users forget their passwords). It also blocks all access to non-company approved USB devices and non-encrypted devices. All managed from a central server and console with a small client on every XP machine.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.