We are trying to disable USB Media for the company. I wanted to use a
ZEN object to automatically add all new imported workstation to a
workstation group called "USB Media - Disabled". This part is no problem.

Next I want an application object to push the registry change to turn
off the USB Media Service:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\UsbStor\Start to

I can do that with a ZEN object no problem.

Next I want another Workstation Group that I can add excluded users to
"USB Media Enable" (after removing them from the USB Media - Disable
group). That will automatically reenable their USB Media at the workstation:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\UsbStor to DWORD Hex 3

Now that works.

Problem that they only work 1 time even if I have distribute always
checked and have run once unchecked. This is a problem if I want to go
back and forth. Also I want to have all IT personal to have this
automatically enabled at login but have the users object disable it
again when they login.

Any tips or suggestions that can be offered.

Thank You,

John Jakus