Hi Andrew, I'll undo the permissions I've added. Maybe I've configured this incorrectly then. Though when I go in and check the user account has full control denied for usbStore.inf and pnf, as well as the System account. Perhaps the User account despite being set as a standard user is somehow accessing or something's accessing the Admin group to install UsbStore devices. Regards, Barry. -----Original Message----- From: Blind-sysadmins [mailto:blind-sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Andrew Hodgson Sent: 01 November 2012 20:41 To: Blind sysadmins list Subject: Re: [Blind-sysadmins] Disabling USB Ports for a useraccount Windows 7 Hi, Yep, that is what I do and it works fine for secure workstations. Andrew. -----Original Message----- From: Blind-sysadmins [mailto:blind-sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Philip Hall Sent: 01 November 2012 20:14 To: 'Blind sysadmins list' Subject: Re: [Blind-sysadmins] Disabling USB Ports for a user account Windows 7 Hi. Why not look into using group policies, either on the local machine, or if necessary, if the machines are on a domain, via the server? -----Original Message----- From: Blind-sysadmins [mailto:blind-sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Barry Toner Sent: Thursday, November 01, 2012 10:34 AM To: blind-sysadmins@lists.hodgsonfamily.org Subject: [Blind-sysadmins] Disabling USB Ports for a user account Windows 7 Hi, The subject says it all really. I found the below article but it's not working, when I log in using the standard user account I've setup previously unused USB devices are still being installed. http://support.microsoft.com/kb/823732 I'd like to crack this nut using the MS Permissions, but am open to suggestions for other ways of doing this. I've looked at how you can do it using the Registry. However, when I navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsbStor The article calls to click on Start Value . There's no start value I can see with a Screen Reader. I see the Dword stuff and default value. None of this has a value of 3 which is on, 4 is to turn it off. Thoughts? Barry. HK Local machine Barry Toner ICT Assistant ICT Department Clanmil Housing Northern Whig House 3 Waring Street Belfast BT1 2DX Tel: 02890 876000 Fax: 02890 876001 _______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins _______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins _______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins