Blocking USBTethering without GPO

Question

Is there any to block USBTethering/ stop executing RNDIS.sys file apart from updating GPO policies? Updating GPO policy for one device will be easy but if there are multiple devices, it is not easy right.

Answer 1

Hello

Blocking USB tethering or stopping the execution of the RNDIS.sys file without using Group Policy Objects (GPO) can indeed be challenging, especially when dealing with multiple devices. However, there are a few alternative methods you can consider:

Device Manager: You can manually disable the RNDIS driver in the Device Manager. This method is suitable for individual devices but may not be practical for a large number of devices.

Registry Editor: You can create a registry script to disable the RNDIS driver. This script can be deployed to multiple devices using a software deployment tool. Here is an example of a registry script:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RNDISMP]

"Start"=dword:00000004

This script sets the RNDISMP service to "disabled" (Start=4).

Endpoint Management Tools: Tools like Microsoft Intune can be used to manage device configurations and enforce policies across multiple devices. Intune allows you to create custom configuration profiles that can disable specific drivers or services.

Local Security Policy: You can use the Local Security Policy to block the installation of specific device drivers. This method is similar to using GPO but can be applied locally on each device.

Third-Party Security Software: Some endpoint security solutions offer features to block specific types of network connections, including USB tethering. These solutions can be deployed across multiple devices and managed centrally.