Viewing 1 reply thread
  • Author
    • #15215
      Michael Pietroforte
      Member Points: 40,314
      Author of the year 2018
      Rank: 4

      A reader asked how to monitor access to the USB port. He wants to know which users tried to use USB drives after he disabled USB drive use through Group Policy.

    • #15300
      Kyle Beckman
      Member Points: 392
      Rank: 2

      So the short answer is that this takes a 3rd party product.  The slightly longer version is that Windows doesn’t log every USB device insertion in the Event Log.  If the device has never been inserted, there will be an entry in the System Event Log with UserPnp as the source when the driver is loaded.

Viewing 1 reply thread
  • You must be logged in to reply to this topic.
© 4sysops 2006 - 2023


Please ask IT administration questions in the forums. Any other messages are welcome.


Log in with your credentials


Forgot your details?

Create Account