| PT-PO-WIN-C-Deny USB RW | |
| Data collected on: 2-9-2025 09:27:31 | |
| Domain | emea.tpg.ads |
| Owner | EMEA\silva.12303-adm |
| Created | 24-5-2019 15:08:30 |
| Modified | 9-2-2023 14:49:06 |
| User Revisions | 12 (AD), 12 (SYSVOL) |
| Computer Revisions | 24 (AD), 24 (SYSVOL) |
| Unique ID | {45e7906d-aa33-422f-9130-8b91386bd5cd} |
| GPO Status | User settings disabled |
| Location | Enforced | Link Status | Path |
|---|---|---|---|
| Clients | No | Enabled | emea.tpg.ads/PT/Systems/Clients |
| Name |
|---|
| EMEA\PT-L-SEC-Deny USB RW |
| Name | Allowed Permissions | Inherited |
|---|---|---|
| EMEA\Domain Admins | Edit settings, delete, modify security | No |
| EMEA\PT-L-SEC-Delegation Modify Group Policy Settings Access | Edit settings, delete, modify security | No |
| EMEA\PT-L-SEC-Deny USB RW | Read (from Security Filtering) | No |
| EMEA\silva.12303-adm | Edit settings, delete, modify security | No |
| NT AUTHORITY\Authenticated Users | Read | No |
| NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | Read | No |
| NT AUTHORITY\SYSTEM | Edit settings, delete, modify security | No |
| ROOT\Enterprise Admins | Edit settings, delete, modify security | No |
| Policy | Setting | Comment |
|---|---|---|
| All Removable Storage classes: Deny all access | Enabled | #13963971 |
| CD and DVD: Deny execute access | Enabled | #13963971 |
| CD and DVD: Deny read access | Enabled | #13963971 |
| CD and DVD: Deny write access | Enabled | #13963971 |
| Floppy Drives: Deny execute access | Enabled | #13963971 |
| Floppy Drives: Deny read access | Enabled | #13963971 |
| Floppy Drives: Deny write access | Enabled | #13963971 |
| Removable Disks: Deny execute access | Enabled | #13963971 |
| Removable Disks: Deny read access | Enabled | #13963971 |
| Removable Disks: Deny write access | Enabled | #13963971 |
| Tape Drives: Deny execute access | Enabled | #13963971 |
| Tape Drives: Deny read access | Enabled | #13963971 |
| Tape Drives: Deny write access | Enabled | #13963971 |
| WPD Devices: Deny read access | Enabled | #13963971 |
| WPD Devices: Deny write access | Enabled | #13963971 |
| Action | Update |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SYSTEM\CurrentControlSet\Services\USBSTOR |
| Value name | Start |
| Value type | REG_DWORD |
| Value data | 0x4 (4) |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| #13963971 - Disable the use of USB storage devices |