Hi guys, I'm running a Sernet-samba-ad-4.1.17-11.el6.x86_64 PDC with another 4 Samba4 DC's all joined to the same AD domain myorg.local My client wants me to disable all USB ports for all the users joined to the domain. Is it possible to do this via a group policy so that users logging onto any of the DC's will not be able to use their USB ports? I currently admin my AD with a combination of the samba-tool as well as the AD Users and Groups MMC Windows utility. Any guidance is greatly appreciated. Thank you. Regards. Neil Wilson
yes, this is possible, by GPO. In GPO, go to: (user or computer )Configuration - Policy ? Administrative template ? System ? Removable storage Access Play with these settings to get what you want. for Managing Hardware Restrictions via Group Policy read : http://technet.microsoft.com/en-us/magazine/cc138012.aspx Greetz, Louis>-----Oorspronkelijk bericht----- >Van: nwilson123 at gmail.com >[mailto:samba-bounces at lists.samba.org] Namens Neil >Verzonden: woensdag 20 mei 2015 12:10 >Aan: samba >Onderwerp: [Samba] Samba4 Disable USB ports > >Hi guys, > >I'm running a Sernet-samba-ad-4.1.17-11.el6.x86_64 PDC with another 4 >Samba4 DC's all joined to the same AD domain myorg.local > >My client wants me to disable all USB ports for all the users >joined to the >domain. > >Is it possible to do this via a group policy so that users >logging onto any >of the DC's will not be able to use their USB ports? > >I currently admin my AD with a combination of the samba-tool >as well as the >AD Users and Groups MMC Windows utility. > >Any guidance is greatly appreciated. > >Thank you. > >Regards. > >Neil Wilson >-- >To unsubscribe from this list go to the following URL and read the >instructions: https://lists.samba.org/mailman/options/samba > >
Hi Louis, Thank you very much for your speedy response. I'll definitely go ahead and investigate further. Much appreciated. Regards. Neil Wilson. On Wed, May 20, 2015 at 1:24 PM, L.P.H. van Belle <belle at bazuin.nl> wrote:> yes, this is possible, by GPO. > > In GPO, go to: > (user or computer )Configuration > - Policy > ? Administrative template > ? System > ? Removable storage Access > > Play with these settings to get what you want. > > for Managing Hardware Restrictions via Group Policy read : > http://technet.microsoft.com/en-us/magazine/cc138012.aspx > > > Greetz, > > Louis > > > > > >-----Oorspronkelijk bericht----- > >Van: nwilson123 at gmail.com > >[mailto:samba-bounces at lists.samba.org] Namens Neil > >Verzonden: woensdag 20 mei 2015 12:10 > >Aan: samba > >Onderwerp: [Samba] Samba4 Disable USB ports > > > >Hi guys, > > > >I'm running a Sernet-samba-ad-4.1.17-11.el6.x86_64 PDC with another 4 > >Samba4 DC's all joined to the same AD domain myorg.local > > > >My client wants me to disable all USB ports for all the users > >joined to the > >domain. > > > >Is it possible to do this via a group policy so that users > >logging onto any > >of the DC's will not be able to use their USB ports? > > > >I currently admin my AD with a combination of the samba-tool > >as well as the > >AD Users and Groups MMC Windows utility. > > > >Any guidance is greatly appreciated. > > > >Thank you. > > > >Regards. > > > >Neil Wilson > >-- > >To unsubscribe from this list go to the following URL and read the > >instructions: https://lists.samba.org/mailman/options/samba > > > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba >
On Wed, May 20, 2015 at 6:10 AM, Neil <nwilson123 at gmail.com> wrote:> Hi guys, > > I'm running a Sernet-samba-ad-4.1.17-11.el6.x86_64 PDC with another 4 > Samba4 DC's all joined to the same AD domain myorg.local > > My client wants me to disable all USB ports for all the users joined to the > domain.Has your client thought carefully about possible interference with smart phone tethering, recharging, keyboards and mice? With wifi network devices or in-office file sharing done with USB devices? Or tested this? How, excactly, do they plan to *use* their computers since few devices have PS2 ports anymore?> Is it possible to do this via a group policy so that users logging onto any > of the DC's will not be able to use their USB ports? > > I currently admin my AD with a combination of the samba-tool as well as the > AD Users and Groups MMC Windows utility. > > Any guidance is greatly appreciated. > > Thank you. > > Regards. > > Neil Wilson > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba
El 23/5/2015 3:27 p. m., "Nico Kadel-Garcia" <nkadel at gmail.com> escribi?:> > On Wed, May 20, 2015 at 6:10 AM, Neil <nwilson123 at gmail.com> wrote: > > Hi guys, > > > > I'm running a Sernet-samba-ad-4.1.17-11.el6.x86_64 PDC with another 4 > > Samba4 DC's all joined to the same AD domain myorg.local > > > > My client wants me to disable all USB ports for all the users joined tothe> > domain. > > Has your client thought carefully about possible interference with > smart phone tethering, recharging, keyboards and mice? With wifi > network devices or in-office file sharing done with USB devices? Or > tested this? How, excactly, do they plan to *use* their computers > since few devices have PS2 ports anymore? > > > Is it possible to do this via a group policy so that users logging ontoany> > of the DC's will not be able to use their USB ports? > > > > I currently admin my AD with a combination of the samba-tool as well asthe> > AD Users and Groups MMC Windows utility. > > > > Any guidance is greatly appreciated. > > > > Thank you. > > > > Regards. > > > > Neil Wilson > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: https://lists.samba.org/mailman/options/samba > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/sambaFor now they are talking about block usb mass storages, not all usb devices.
In my case and just to disable pen external hard drives drivers then the GPO blocks those goods in USB. Mouse and keyboard still functioning normally. Sincerely, Gabriel Franca> Em 23/05/2015, ?(s) 10:26, Nico Kadel-Garcia <nkadel at gmail.com> escreveu: > > Has your client thought carefully about possible interference with > smart phone tethering, recharging, keyboards and mice? With wifi > network devices or in-office file sharing done with USB devices? Or > tested this? How, excactly, do they plan to *use* their computers > since few devices have PS2 ports anymore?