Scripting Question

USB Enable/Disable scripting

04/30/2015 2544 views

We have just setup our K1000 and are trying to see if it is something we can utilize. We currently use GPO and ESET to block the use of USB drives but I have been told that the K1000 might be a better option that allows more of a fine tuned control over that.

Is there a way to block USB based on the type of device rather than just as say a storage drive? It would be nice to be able to block thumb drives but allow cameras as we need to use them and it feels a bit unsecure to enable USB devices just for that, it tends to lead to someone loading a virus ridden thumb drive.

0 Comments   [ + ] Show comments


All Answers


Well after a bit of digging, and confirmation from our KACE trainer that we can't do it, I did find this:


If anyone happens to need the ability to block USB but allow specific devices this will work the best as it allows more precise control where as the USB Enable/Disable in the K1000 is just a blank block of the USBSTOR in the registry so it blocks anything that uses that to load such as flash drives, cameras or external HDDs.

Hope this helps others.

Answered 05/01/2015 by: jimmysmitty
White Belt

  • good work on finding an answer to your question. I have in the past used Devmgr to disable devices, but you need to know its details to block it. The KACE approach seems a little basic.

Don't be a Stranger!

Sign up today to participate, stay informed, earn points and establish a reputation for yourself!

Sign up! or login

View more:


This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ