(imported topic written by saravana23)
Hi,
I know we can disable USB removable device port using the fixlet “disable removable media”. But I just want to know whether this will block the port completely or we can use that port even for USB mouse and USB keyboard. If it blocks, how to allow these devices in the same particular port. Its very urgent. Can anyone address this queries?
Regards,
Sarav
(imported comment written by sthull)
These fixlets (I assume you’re referring to fixlets 32 & 39 in Security Policy Manager site) only disable access to the driver for USB storage devices, usbstor.sys. USB mice and keyboards would use different driver, typically hidusb.sys, so they would not be affected.
Regards,
Steve
(imported comment written by Lee Wei)
Hi Sarav,
The Fixlet we have in the Security Policy Manager “Removable Media: Disable Installation of USB Storage Devices” will indeed block only USB storage. The USB mouses and keyboards will continue to work.
The Fixlet deny access to %SystemRoot%\Inf\Usbstor.pnf and %SystemRoot%\Inf\Usbstor.inf.
You can refer to this Microsoft KB article for more info:
http://support.microsoft.com/kb/823732
Lee Wei