SP2 no desactiva puertos USB

14/08/2007 - 18:28 por DarthJorge | Informe spam
Tenia una politica que bloquea las memorias USB, funcionando adecuadamente
con WinServer 2003 SP1, cuando instalamos el SP2 ha dejado de funcionar.

Esta es la política en el archivo adm que utilizamos, cual es el problema?

CLASS MACHINE
CATEGORY !!category
CATEGORY !!categoryname
POLICY !!policynameusb
KEYNAME "SYSTEM\CurrentControlSet\Services\USBSTOR"
EXPLAIN !!explaintextusb
PART !!labeltextusb DROPDOWNLIST REQUIRED

VALUENAME "Start"
ITEMLIST
NAME !!Disabled VALUE NUMERIC 3 DEFAULT
NAME !!Enabled VALUE NUMERIC 4
END ITEMLIST
END PART
END POLICY
POLICY !!policynamecd
KEYNAME "SYSTEM\CurrentControlSet\Services\Cdrom"
EXPLAIN !!explaintextcd
PART !!labeltextcd DROPDOWNLIST REQUIRED

VALUENAME "Start"
ITEMLIST
NAME !!Disabled VALUE NUMERIC 1 DEFAULT
NAME !!Enabled VALUE NUMERIC 4
END ITEMLIST
END PART
END POLICY
POLICY !!policynameflpy
KEYNAME "SYSTEM\CurrentControlSet\Services\Flpydisk"
EXPLAIN !!explaintextflpy
PART !!labeltextflpy DROPDOWNLIST REQUIRED

VALUENAME "Start"
ITEMLIST
NAME !!Disabled VALUE NUMERIC 3 DEFAULT
NAME !!Enabled VALUE NUMERIC 4
END ITEMLIST
END PART
END POLICY
POLICY !!policynamels120
KEYNAME "SYSTEM\CurrentControlSet\Services\Sfloppy"
EXPLAIN !!explaintextls120
PART !!labeltextls120 DROPDOWNLIST REQUIRED

VALUENAME "Start"
ITEMLIST
NAME !!Disabled VALUE NUMERIC 3 DEFAULT
NAME !!Enabled VALUE NUMERIC 4
END ITEMLIST
END PART
END POLICY
END CATEGORY
END CATEGORY

[strings]
category="Custom Policy Settings"
categoryname="Restrict Drives"
policynameusb="Disable USB Removable Drives"
policynamecd="Disable CD-ROM"
policynameflpy="Disable Floppy"
policynamels120="Disable High Capacity Floppy"
explaintextusb="Disables the USB Removable Drives capability by disabling
the usbstor.sys driver. Select the ENABLED radiobox, then select STOPPED
for the usbstore.sys driver status in the drop-down list. Note that this
will only prevent usage of newly plugged-in USB Removable Drives or Flash
Drives, devices that were plugged-in while this option was not configured
will continue to function normally. Also, devices that use the same device or
hardware ID (for example - 2 identical Flash Disks made by the same
manufacturer) will still function if one of them was plugged-in prior to the
configuration of this setting. In order to successfully block them you will
need to make sure no USB Removable Drive is plugged-in while you set this
option. In order to re-enable the usage of USB Removable Drives select
STARTED for the usbstore.sys driver status in the drop-down list."
explaintextcd="Disables the CD-ROM Drive by disabling the cdrom.sys driver.
Select the ENABLED radiobox, then select STOPPED for the cdrom.sys driver
status in the drop-down list. In order to re-enable the usage of USB
Removable Drives select STARTED for the cdrom.sys driver status in the
drop-down list."
explaintextflpy="Disables the Floppy Drive by disabling the flpydisk.sys
driver. Select the ENABLED radiobox, then select STOPPED for the
flpydisk.sys driver status in the drop-down list. In order to re-enable
the usage of USB Removable Drives select STARTED for the flpydisk.sys driver
status in the drop-down list."
explaintextls120="Disables the High Capacity Floppy Drive by disabling the
sfloppy.sys driver. Select the ENABLED radiobox, then select STOPPED for
the sfloppy.sys driver status in the drop-down list. In order to
re-enable the usage of USB Removable Drives select STARTED for the
sfloppy.sys driver status in the drop-down list."
labeltextusb="usbstore.sys driver status"
labeltextcd="cdrom.sys driver status"
labeltextflpy="flpydisk.sys driver status"
labeltextls120="sfloppy.sys driver status"
Enabled="Stopped"
Disabled="Started"
 

Leer las respuestas

#1 Javier Inglés [MS MVP]
14/08/2007 - 22:32 | Informe spam
Verifica de nuevo la ADM en base a lo expuesto en:

HOWTO: Use Group Policy to disable USB, CD-ROM, Floppy Disk and LS-120
drivers in Windows Server 2003?
http://www.jsifaq.com/SUBS/tip9400/rh9437.htm

http://support.microsoft.com/kb/555324



Ten en cuenta que sólo funciona para dispositivos USB que no se hayan
conectado nunca; para los que ya hayan sido conectados una vez, debes
modificar el registro como indica el mismo artículo
Salu2!!
Javier Inglés
https://mvp.support.microsoft.com/p...B5567431B0
MS MVP, Windows Server-Directory Services



"DarthJorge" escribió en el mensaje
news:
Tenia una politica que bloquea las memorias USB, funcionando adecuadamente
con WinServer 2003 SP1, cuando instalamos el SP2 ha dejado de funcionar.

Esta es la política en el archivo adm que utilizamos, cual es el problema?

CLASS MACHINE
CATEGORY !!category
CATEGORY !!categoryname
POLICY !!policynameusb
KEYNAME "SYSTEM\CurrentControlSet\Services\USBSTOR"
EXPLAIN !!explaintextusb
PART !!labeltextusb DROPDOWNLIST REQUIRED

VALUENAME "Start"
ITEMLIST
NAME !!Disabled VALUE NUMERIC 3 DEFAULT
NAME !!Enabled VALUE NUMERIC 4
END ITEMLIST
END PART
END POLICY
POLICY !!policynamecd
KEYNAME "SYSTEM\CurrentControlSet\Services\Cdrom"
EXPLAIN !!explaintextcd
PART !!labeltextcd DROPDOWNLIST REQUIRED

VALUENAME "Start"
ITEMLIST
NAME !!Disabled VALUE NUMERIC 1 DEFAULT
NAME !!Enabled VALUE NUMERIC 4
END ITEMLIST
END PART
END POLICY
POLICY !!policynameflpy
KEYNAME "SYSTEM\CurrentControlSet\Services\Flpydisk"
EXPLAIN !!explaintextflpy
PART !!labeltextflpy DROPDOWNLIST REQUIRED

VALUENAME "Start"
ITEMLIST
NAME !!Disabled VALUE NUMERIC 3 DEFAULT
NAME !!Enabled VALUE NUMERIC 4
END ITEMLIST
END PART
END POLICY
POLICY !!policynamels120
KEYNAME "SYSTEM\CurrentControlSet\Services\Sfloppy"
EXPLAIN !!explaintextls120
PART !!labeltextls120 DROPDOWNLIST REQUIRED

VALUENAME "Start"
ITEMLIST
NAME !!Disabled VALUE NUMERIC 3 DEFAULT
NAME !!Enabled VALUE NUMERIC 4
END ITEMLIST
END PART
END POLICY
END CATEGORY
END CATEGORY

[strings]
category="Custom Policy Settings"
categoryname="Restrict Drives"
policynameusb="Disable USB Removable Drives"
policynamecd="Disable CD-ROM"
policynameflpy="Disable Floppy"
policynamels120="Disable High Capacity Floppy"
explaintextusb="Disables the USB Removable Drives capability by disabling
the usbstor.sys driver. Select the ENABLED radiobox, then select
STOPPED
for the usbstore.sys driver status in the drop-down list. Note that
this
will only prevent usage of newly plugged-in USB Removable Drives or Flash
Drives, devices that were plugged-in while this option was not configured
will continue to function normally. Also, devices that use the same device
or
hardware ID (for example - 2 identical Flash Disks made by the same
manufacturer) will still function if one of them was plugged-in prior to
the
configuration of this setting. In order to successfully block them you
will
need to make sure no USB Removable Drive is plugged-in while you set this
option. In order to re-enable the usage of USB Removable Drives select
STARTED for the usbstore.sys driver status in the drop-down list."
explaintextcd="Disables the CD-ROM Drive by disabling the cdrom.sys
driver.
Select the ENABLED radiobox, then select STOPPED for the cdrom.sys
driver
status in the drop-down list. In order to re-enable the usage of USB
Removable Drives select STARTED for the cdrom.sys driver status in the
drop-down list."
explaintextflpy="Disables the Floppy Drive by disabling the flpydisk.sys
driver. Select the ENABLED radiobox, then select STOPPED for the
flpydisk.sys driver status in the drop-down list. In order to
re-enable
the usage of USB Removable Drives select STARTED for the flpydisk.sys
driver
status in the drop-down list."
explaintextls120="Disables the High Capacity Floppy Drive by disabling the
sfloppy.sys driver. Select the ENABLED radiobox, then select STOPPED
for
the sfloppy.sys driver status in the drop-down list. In order to
re-enable the usage of USB Removable Drives select STARTED for the
sfloppy.sys driver status in the drop-down list."
labeltextusb="usbstore.sys driver status"
labeltextcd="cdrom.sys driver status"
labeltextflpy="flpydisk.sys driver status"
labeltextls120="sfloppy.sys driver status"
Enabled="Stopped"
Disabled="Started"

Preguntas similares