Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We would like to prevent USB access to machines (primarily Windows XP, 2003 machines) so that it would not be possible for employees to copy anything from the disk to a pen drive.

share|improve this question
up vote 5 down vote accepted

You can do this using Group Policy Preferences.

See here for more info.

share|improve this answer
it works, thanks – user42891 Jul 29 '10 at 12:50

At my current job, we use Lumension Endpoint Security ( It is annoying as hell, which is exactly what it is supposed to do, so yes, it works well.

share|improve this answer

You can disable USB ports in Device Manager, but it will affect administrators as well.

share|improve this answer
thats fine with us – user42891 May 12 '10 at 9:22

I would have said disabling USB ports too, but bear in tmind if your mouse/keyboard/webcam are usb this will disable them too.

share|improve this answer
i don't want my other devices to get affected with this, thanks for the hint – user42891 May 21 '10 at 13:31

I used devicelock in the past, it does the job but it was a bit tricky to setup and maintein

share|improve this answer

Microsoft provides an Administrative template to restrict USB drives on 2003/XP machines. To make the administrative template available in Group Policy Management, you will need to paste the administrative template text into a "RestrictDrives.adm" file, save it, and follow the instructions under the links in the "More Information" section.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.