Hello, I have only a couple of pc's to which I want to block usb mass storage attachment ( pen drives etc.. ) Is there any option in the Local Security Policy or it has to be done from the registry Only pen drives and ext HDDs need to be blocked Machines have XP PRO For the moment I do not want to block from DC GPO, I know it is not right however I still need to group these pcs before I do that. So a local fix is fine Tanks

Hi, By default, Group Policy does not offer a facility to easily disable USB. However, Group Policy can be extended to use customized settings by applying an ADM template. For more information, please refer to: HOWTO: Use Group Policy to disable USB, CD-ROM, Floppy Disk and LS-120 drivers http://support.microsoft.com/kb/555324 How can I prevent users from connecting to a USB storage device? http://support.microsoft.com/kb/823732 Hope it helps. Regards, Bruce