Disabling the USB drive and remote desktop for XP clients

I would like to do the following using Group Policy for my XP clients:
1. Disable USB drive.
2. Disable remote desktop.
1) There is no native GPO policy for controlling USB devices. You have two options. First, you can add in a custom Registry setting to control the Registry value. This can be done with a custom ADM template, or by using the PolicyMaker registry extension. You just need to alter the HKCUSYSTEMCurrentControlSetServicesUSBSTOR Registry key and Start value. Second, you can look at a third party tool such as PolicyMaker Standard, which has a GPO extension that handles devices, including USB drives.

2) Remote Desktop is still referred to as Terminal Services. Therefore, go to Computer Configuration|Administrative Templates|Windows Components|Terminal Services and configure the "Allow users to connect remotely using Terminal Services".

This was first published in August 2005

Join the conversationComment

Share
Comments

    Results

    Contribute to the conversation

    All fields are required. Comments will appear at the bottom of the article.
    Back to top