block usb

hi friends dose any one have a tweak where i can block usb access to all users but admin i.e only admin could access usb drive and no other user can
pls let me know no third party softwares please can a policy be applied to do this thanks in advance

Set the permissions on the usbstor.ini and pnf in the C:\Windows\inf folder.

Also set the permissions on the usbstor.sys in C:\Windows\System32\drivers

Set it to deny read for the users that you do not want to use USB drives. This can be done via group policy as well.

Restrict access for installation of new USB storage devices by editing this file

Quote:

---

%SystemRoot%\Inf\Usbstor.pnf
%SystemRoot%\Inf\Usbstor.inf

---

Restrict access by disabling the driver:

Quote:

---

[HKEY_LOCAL_MACHINE \System \CurrentControlSet \Services \UsbStor]
Start = 4

---

• Right-click the Usbstor.pnf file, and then click Properties.
• Click the Security tab.
• In the Group or user names list, click the user or group that you want to set Deny permissions for.
• In the Permissions for UserName or GroupName list, click to select the Deny check box next to Full Control, and then click OK.
  
• Note Also add the System account to the Deny list.
• Right-click the Usbstor.inf file, and then click Properties.
• Click the Security tab.
• In the Group or user names list, click the user or group that you want to set Deny permissions for.
• In the Permissions for UserName or GroupName list, click to select the Deny check box next to Full Control, and then click OK.