14 - Windows Server 2012 Disable All USB Port using GPO (Video in Khmer)

Hello my friend! Today I show you step-by-step how to Disable All USB Ports on Client Computer using GPO on Windows Server 2012 R2 inside VMware! Blocking USB storage drives (like USB flash drive, external hard disk, SD card) is super important for company security to prevent data leakage and stop virus or malware infection from USB drives! Very easy to follow with video tutorial in Khmer! Let's get started!

💡 Tip: Blocking USB removable storage via GPO is enterprise security requirement! You configure policy once on server and Windows automatically blocks USB flash drives on all domain client PCs!

Step 1: Create New GPO in Group Policy Management

1. Open Server Manager > click Tools menu at top right > select Group Policy Management (gpmc.msc).
2. Right-click target department OU (example: Sales or Computers OU) > select Create a GPO in this domain, and Link it here....
3. Name your GPO (example: GPO_Disable_USB_Ports) > click OK.
4. Right-click newly created GPO > select Edit....

Step 2: Configure Removable Storage Access Policy

Inside Group Policy Management Editor window:

1. Navigate to path: Computer Configuration > Policies > Administrative Templates > System > Removable Storage Access (Note: You can also configure under User Configuration if you want to block USB for specific user accounts instead of computers!)
2. Find setting named All Removable Storage classes: Deny all access.
3. Double-click All Removable Storage classes: Deny all access > select Enabled.
4. Click Apply > click OK.

💡 Tip: If you only want to block users from copying files OUT to USB drive (prevent data theft) but still allow reading files FROM USB drive, enable Removable Disks: Deny write access instead!

Step 3: Test Policy Update on Client Computer

1. On client PC (Windows 7 / 10), open Command Prompt (cmd) as Administrator.
2. Type command gpupdate /force and press Enter.
3. Plug in any USB flash drive or USB external hard drive into client PC.
4. Try opening USB drive in File Explorer: Windows will show access denied error message "Location is not accessible. Access is denied"!

💡 Tip: If USB drive is still accessible after running gpupdate /force, restart client computer or check if client PC computer account is located inside correct OU linked with this GPO!

Watch Video Tutorial (Khmer)

Watch full step-by-step video tutorial below to see complete process in Khmer:

Related Tutorials

• 🎓 Windows Server 2012 Complete Tutorial Series (Video in Khmer)
• 🔗 11 - Windows Server 2012 Map Network Drive with GPO (Video in Khmer)
• 📜 12 - Windows Server 2012 Map Network Drive to Client Computer with Script (Video in Khmer)
• 💾 13 - Windows Server 2012 Set Disk Storage to Client Computer (Video in Khmer)
• 🔑 15 - Windows Server 2012 Allow User to Reset Password (Video in Khmer)

Hope this tutorial help you disable USB ports using GPO on Windows Server 2012 R2 easily! Practice Group Policy security management today. Happy learning my friends! Sharing is caring!