Check out the capabilities of ADAudit Plus here.

The settings apply at the computer level. The following table describes the policy settings in the Horizon Client Configuration ADMX template file for filtering USB devices. The solution also sends real-time alerts for critical events and thereby help you to secure your network from threats and boost your IT security posture. Policy Settings for Filtering USB Devices. Restart the computer to apply the changes.Īctive Directory Auditing just got easier!ĪDAudit Plus comes bundled with more than 300 predefined reports that makes your AD auditing easier. GPO to Disable USB Drives for Certain Users In the Group Policy Management console, select your Disable USB Access policy.In the left pane, expand the 'Forest'and 'Domains' nodes to reveal the specified domain you want to track the changes for.Įxpand the domain a right click 'Default Domain Policy'.You can also choose a domain policy that is universal throughout the domain, or create a new GPO and link it to the Default Domain Policy.Ĭlick on 'Edit' of the desired group policy, to open up the Group Policy Management Editor.Įxpand 'Computer Configuration'->Policies->Windows Settings->Administrative Templates->System->Removable Storage Access.ĭouble click the All Removable Storage classes: Deny all access policy. If the device is allowed, the host then checks the Client USB device optimization rules for the device. When a user plugs in a USB input device, the host checks if the USB policy settings allow the device. Launch the 'Server Manager'and open the Group Policy Management Console(GPMC). The GPO setting DENY ALL USB devices so you may need to unconfigure the setting then disable only certain USB devices or allow only certain USB devices (note that DENY take precedence). Client USB device optimization rules can be applied to devices to disable optimization, or to change the optimization mode.

Gpo usb block