Prevent MTP & USB tethering

The security team of a customer is in the midst of testing Windows 7 security features and came up with the following queries.
While conducting some tests on desktops using Windows 7, our internal audit department observed that it is possible to transfer data from a Windows 7 desktop to
an android device using Media Transfer Protocol even if the USB port is blocked through AD Group policies. Similarly it is also possible to perform this operation on windows XP desktops if media player v 10 is installed on them. They
also observed that if a phone is connected to a Windows 7 desktop, USB tethering allows the user to bypass the proxy and access internet unrestricted.
I wanted to check with you if these are known issues on OS 7 and whether there are any solutions available to prevent them through AD policies on Windows 7 OS?
Would appreciate any help in this regards.

Hello there,
this security issue also got to our attention.
2008 AD, USB blocked via GPO, working fine for Mass Storage and so on.
If you have a regular user without local admin rights an he connects his Samsung S2 / S3 / Ace whatever nothing happens.
But when he activates USB Tethering in Settings on his Phone, the Windows Client creates a new NDIS based Internet Sharing Device.
After some Secondes he can bypass the Proxy (pac/squid) with the Internet Explorer, former blocked sites like facebook now work fine...
He can also access Documents from his network shares ... 
If there is no iTunes on the Client USB Tethering will not Work with iPhones because they use ODI instead of NDIS.
As far as i can see the NDIS internet sharing device has no extra class id wich i could block via GPO.
I ve overwatched the process some times on different Clients with Mark Russonovichs Sysinternals Tools.
You can see new Sockets and connections to 1.1.1.1- 1.1.1.5 UMTS Provider and WUDFHOST.exe pops up.
We are using PKI-Card Readers, Scanners and some local Printers. Also there are some special users who are not in the restricted USB group to move large CAD Files from CAD-Client to CAD Client.
Even 3rd Party Software couldnt block the USB Tethering...
Do you have a solution via GPO to block USB Tethering / the driver initialisation / a Class ID ?

Similar Messages

  • Curve 9220 BlackBerry App World registration error MTP USB Driver is not installed

    Hi,
    Recently I have purchased Curve 9220, trying connect to BlackBerry App World setup in the first instance I get 
    1. Get the BlackBerry App World Browser Plug-in (I get tick mark) then when I get 
    2. Connect your smartphone I get the drop down of my pin no I select my PIN no here I get a error message (An error has occurred communicating with the BlackBerry App World Web plugin. Please restart your device and try again. If you have content protection enabled on your device, please disable and try again.)
    I have tried rebooting my device no of times it does not work.
    I have removed all USB driveres thats was there in PC rebooted the system it is still not working.
    I have even tried in another PC having win7 it gives error message MTP USB Driver is not installed.
    For information Content protection is not eabled the encription is not ON in my hand set
    Another problem whenever I connect my deice to USB every time it takes up the driver asks me to reboot the sytem (I have even tried the same 4-5 times) still not wokring.
    The hand set is communicating with the BlackBerry desk top software (I have downloaded the latest one and using the same).
    I need to install few apps which was there in my earlier BB so please help.
    Best regards,
    Shaibal Ghosh

    Hello shaibalghosh,
    Welcome to the Community,
    As you having difficulty in connecting to apps. world , On your Homescreen Go to Options > Security > and check 
    encryption is disable For your device and Media card and also Check Firewall it may prevent connecting Apps 
    World. 
              Please have a look at this article of KB Apps world web plug-in error appear when attempting to install applications from a computer
               Try installing OTA .
    Good Luck
    Prince
    Click " Like " if you want to Thank someone.
    If Problem Resolves mark the post(s) as " Solution ", so that other can make use of it.
    Click " Like " if you want to Thank someone.
    If Problem Resolves mark the post(s) as " Solution ", so that other can make use of it.

  • Windows 7 64bit has an MTP USB Device Failed error message when I attach my Ipad1

    I keep getting an MTP USB Device Failed error message when I plug in my USB cable into my Ipad1.  Can someone help?

    This is NOT resolved.  The "Upper..."Key in the registry editor doesn't exist as you can see below in the image I am providing.  This is still an OUTSTANDING issue, can someone please help with resolving this issue, super frustrating.
    This is not just an iPAD issue, I get the same problem with my iPhone as well, both (iPhone and iPad) have the latest iOS 6.1.3 installed as well.

  • HT201401 MTP USB Device not installed

    Hello -
    I'm new to this community message board.
    I recently started having this problem about two months ago.  Up til that time I didn't have this problem.
    When I would connect my iPhone 4S to my windows 7 computer, the folder files would pop up and ask if I wanted to open the files from the iPhone connection through the USB port that I have always used.
    It started two months ago, that when I connected my iPhone in the same way that I have always connected through the USB port, that instead Windows would recognize the connection but attempt to install the drivers. A message always comes up saying that Windows can not install the MTP USB Device because It can not load the drivers for this device and Code 31.
    I've searched the web for solutions but have not found any that fix this problem. These are troubleshooting things that I have tried:
    I have downloaded and installed the lastest iTunes application.
    I have upgraded the iPhone to the lastest IOS
    I have reset the iPhone, then reconnected to USB port on computer
    I have connected the iPhone to another USB port on my computer
    I have selected an earlier Windows System Restore point at a time before this problem existed and restored my computer
    I have used the Windows 7 installation disk to repair the Windows Operating System
    I have uninstalled the drivers for the iPhone in Device Manager, restarted the computer and then connected the iPhone and USB cable to the computer.
    I have used another USB Cable to connect the iPhone to the computer.
    I have looked in Control Panel under Devices - the Apple Mobil Device Driver is displayed with no problems. However the iPhone is displayed with a triangle and an exclamation mark in the triangle.
    I have viewed Device Manager in Windows 7 and looked in these categories: Universeral Serial Bus Controller - everything is okay, no triangles with exlamation marks in them or any other markings on any of the Standard Enhanced PCI to USB Controllers. The Category in Device Manager called Human Interface Devices also looks okay.
    In Device Manager the category Portable Devices lists H:\, MTP USB Device, WPD File System Device Driver all have the small yellow triangle with the exclamation mark in the triangle. When I double click to open these devices up in Device Manager they all say the device is not working properly because windows can not load the drivers required for this device. (Code 31).
    Windows 7 still does not recognize the iPhone as it use to do with the open file window that pops-up when the iPhone is connected to computer. Windows shows these drivers for the iPhone on my computer and these show up in the properties of the MTP USB Device - which is what Windows 7 calls the iPhone connection.
    UMDF\WpdMtpdDr.dll
    winusb.sys
    WUDFRd.sys
    WpdMtp.dll
    WpdMtpUS.dll
    So has anyone had this problem of Windows giving error message “can not load drivers for this device and Code 31” and is there a fix?
    Thank you if you can help with this problem.

    I had the same iss - it's a known issue whereby Windows attempts to use the wrong driver to access the phone.
    BACK UP YOUR REGISTRY!!! Editing the registry can be (read: IS) dangerous and can cause no end of pain if done incorrectly.(But dont wort..i did it...)
    - To Back Up your Registry: Click Start menu and click "Run". Type "regedit". Click File, then choose export and type "iphone driver fix registry backup".
    - Click Export and let it export the the registry to a file.
    - To fix the issue: Follow the folder tree on the left to: hkeylocalmachine > system > current control set > control > class
    - Find “{EEC5AD98-8080-425F-922A-DABF3DE3F69A}” down the LEFT hand side and click on it.
    - Under the list on the RIGHT hand side find "UpperFilters"
    - Right-Click UpperFilters and click delete
    - Close the registry editor and restart your PC (without the iphone attached).
    - Once restarted and logged back in, plug in your iphone and voila!  Windows will actually choose the correct driver and you'll be in like flynn.

  • IPad2 on Windows 7 : MTP USB Device = This device cannot start. (Code 10)

    Hi Guys,
    I want to access to the Internal Storage of my iPad 2 on Windows 7.
    But I have an error with the MTP USB Device => This device cannot start. (Code 10)
    So I cannot see my iPad in Windows Explorer.
    I tried many actions from Forums :
    update the driver to the "Apple Mobile Device USB Driver" located in "C:\Program Files\Common Files\Apple\Mobile Device Support\Drivers" 
    delete the upper and lower filters in REGEDIT : {36FC9E60-C465-11CF-8056-444553540000}.
    stop and restart the service "Apple Mobile Device"
    But as soon as I connect again the iPad there is the same error message after Installing device driver software => "Device driver software was not successfully installed" : MTP USB Device : Fail
    Is there someone who get the solution ?
    Thank you for you help
    Stephane

    I have a similar problem, only mine is Code 31 for the MTP USB Driver.  The Apple driver loads fine, and I'm able to sync with iTunes, but I can't connect to the device as a drive and copy the photos off of it.
    I've tried nearly everything at this point that has been suggested in other threads, and nothing has seemed to work.

  • Pod Touch 32GB MTP USB device has failed to install and can't sync.

    After updating iTunes on my Win7 64bit PC, when I plug my iPod Touch 32GB in, I get the error message "MTP USB device has failed to install" and can't sync. Yesterday, everything worked well.
    Need help, please!

    Thank you. I removed iTunes, QT, Safari and related software, then applied a Windows update and reinstalled iTunes and related software. It solved my problem and let me sync my iPod.
    Thanks!

  • MTP USB Device Driver problem

    Hi Guys
    I currently have an iPhone 5S and I am trying to connect it to my Windows 8.1 Computer so that it appears as Mass Storage, enabling me to back up photos and videos. I noticed int the Device manager that the "MTP USB Device" has an esclamation mark on it and it states that the driver was unable to verify the digital signiture of the device and cannot be used (Code 52)
    I have tried various methods to try and resolve this issue but I have had no success.
    E.G...
    https://discussions.apple.com/thread/3153566?tstart=0
    https://discussions.apple.com/message/16322708#16322708
    https://discussions.apple.com/message/22972618#22972618
    and various other methods.
    I Contacted Apple support and Microsoft Support but they were unable to help me. The device was working until a week ago and suddenly stopped showing up as a Mass Storage device. It is visable in iTunes and can be used to USB tether, but not USB Storage because of this MTP USB Device error.
    Has anyone got a fix for this that actually works?
    Your assistance greatly appreciated.
    Chris

    Update.
    I have found out that the driver file for MTP USB Device is the file winusb.sys.
    The problem is that it is not digitally signed and windows 8.1 can not verify it's signiture. This is why there is an esclamation mark on the device in device manager.
    I have tried various procedures to fix the problem but none have been successful yet!
    If the driver file was digitally signed, the driver would be fine.
    The search goes on..

  • MTP USB Device did not install

    New PC, Windows 7, Office 2010, My Blackberry desktop software does not see my 9530 Storm  I've downloaded new desktop software, but keep getting an error that my MTP USB device did not install when I connect my 9530 to the USB Port.

    BACK UP YOUR REGISTRY!!! Editing the registry can be (read: IS) dangerous and can cause no end of pain if done incorrectly.
    - To Back Up your Registry: Click START menu and click RUN. Type REGEDIT. Click File, then choose Export and type a name for the Registry Backup, something like REGBACKUP012015 or whatever works for you.
    - Click Export and let it export the registry to a file.
    - To fix the issue: Follow the folder tree on the left to: HKeyLocalMachine > System > Current Control Set > Control > Class
    - Find {EEC5AD98-8080-425F-922A-DABF3DE3F69A} down the LEFT hand side and click on it.
    - Under the list on the RIGHT hand side find UpperFilters
    - Right-Click UpperFilters and click Delete
    - Close the registry editor and restart your PC (without the iphone attached).
    - Once restarted and logged back in, plug in your iphone and voila!  Windows will actually choose the correct driver.

  • Ipad4 connection MTP USB device error with Windows 7 64 bit

    I have recently bought iPad 4. When I connected to my computer through USB running Windows 7 Professional 64 bit  i got the following error message
    "MTP USB Device  failed to install"
    Please guige me

    Hello lwalbring and welcome to the Palm forums.
    Your Visor, as you suspect, does not have Bluetooth, so you must use the IR HotSync option.  Since you are using Windows 7 64-bit, I believe that you are going to have to upgrade to Palm Desktop 6.2.2 to make things work from an OS/Driver perspective.
    Since you are using such an old device, you are also going to have to download and install the PalmHotSyncSetup Utility from Pimlico.  This update turns on support for old Palm OS PDAs in Palm Desktop 6.2.2.  Without the update, you won't be able to sync your Visor with Palm Desktop 6.2.2.  The software is free and the link is all the way at the bottom of the screen.
    Lastly, if your PC doesn't have an IR port on it, you will need to purchase a USB to IR adapter.  Some laptops still have IR ports and most desktops don't.
    Once you have all the pieces, you'll want to go back to the Windows 7 and Vista HotSync thread again, and follow the directions for setting up and configuring IR HotSyncs.
    Alan G

  • Mtp usb device failed error - iphone 3g - win 7 pro

    I have iphone 3g. I use Win 7 pro OS. when i plug in iphone to usb port, i get error message as - device driver failed to install - in detail - mtp usb device failed..
    In iTUNES i am able to view the iphone, sync my contacts with MS outlook etc..
    kindly help
    shansui

    What a load of hogwash.
    I've just had this error come up - WITH NO CHANGE OTHER THAN UPGRADE OF IPHONE 4 TO IOS 5.1.1.
    (running iTunes 10.6.1.7 on 64 Win7)
    Powered phone off, and back on again - same error... Haven't had to reinstall windows in a few years - maybe iTunes is now the least stable software in my collection - Might have to try the two (button) salute to Apple...
    Error on device "MTP USB Device";
    "This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)"

  • MTP USB Device not recognized under Windows 7 Ultimate

    Hey everybody, I'm sure there are plenty of similar threads about this issue, however I haven't seen any with Windows 7 as OS.
    My problem is in the recognition of the driver, since the MTP device is not working properly. I've tried alot of possible solutions, but none of them have worked, i.e the removal of the driver in device manager, tried a custom script for the inf file, deleting of all USB/portable related drivers.
    Its sad that no recovery tools are yet compatible with Windows 7, atleast not that I'm aware of.
    Please, throw some more suggestions/ideas! My Zen works perfectly fine under XP btw.

    I was having the same problem with my Zen Vision:M under Win7 Ultimate 64-bit.
    No matter what I tried from deleting the usb root hubs and reinstalling drivers, nothing would get the mtp usb device driver to load.
    I found that the mtp usb device driver will load correctly as long as you are plugging the USB cable into a direct port and not running it through a USB hub. At first I thought it might be due to an incorrect USB voltage, but the hub I'm using is a powered Belkin hub. Very strange!
    So give that a shot -- run the USB straight to a port out the back of your computer. Don't use a USB hub or ports off your monitor since that is actually a hub as well.
    Good luck!http://forums.mycreativefansite.com/...ify_inline.gif

  • When syncing my iPhone to my computer, an 'MTP USB-device' error appears. How to solve this problem?

    When I try to connect my iPhone to my computer, it seems to be working fine (iTunes opens and connects), but still I'm getting this problem when my computer tries to install the supervisory program/driver (I'm not sure how to say it in English since Dutch is my mother language). I've made a printscreen of the error, and it's in Dutch, but maybe someone can see what the problem is anyway.
    So... It says that the installation of the 'MTP USB-device' part failed.
    The problem is that I want to put my photos on my computer, and I found these instructions (http://support.apple.com/kb/HT4083) to do that. But I don't get an Autoplay dialog box, caused by that error.
    Could someone please help me? Thanks in advance!

    I had the same iss - it's a known issue whereby Windows attempts to use the wrong driver to access the phone.
    BACK UP YOUR REGISTRY!!! Editing the registry can be (read: IS) dangerous and can cause no end of pain if done incorrectly.
    - To Back Up your Registry: Click Start menu and click "Run". Type "regedit". Click File, then choose export and type "iphone driver fix registry backup".
    - Click Export and let it export the the registry to a file.
    - To fix the issue: Follow the folder tree on the left to: hkeylocalmachine > system > current control set > control > class
    - Find “{EEC5AD98-8080-425F-922A-DABF3DE3F69A}” down the LEFT hand side and click on it.
    - Under the list on the RIGHT hand side find "UpperFilters"
    - Right-Click UpperFilters and click delete
    - Close the registry editor and restart your PC (without the iphone attached).
    - Once restarted and logged back in, plug in your iphone and voila!  Windows will actually choose the correct driver and you'll be in like flynn.

  • When I plug in my iPhone to a USB port on the back of my computer I get the error "MTP USB Device driver was not successfully installed"   and of course there is no device that shows up either.  It would be great to download my photos!  I'm using Windows

    When I plug in my iPhone to a USB port on the back of my computer I get the error "MTP USB Device driver was not successfully installed"   and of course there is no device that shows up either.  It would be great to download my photos!  I'm using Windows

    Go through this support doc:
    OS: Device not recognised in iTunes
    Windows: http://support.apple.com/kb/TS1538

  • My iPad2 went blank. Troubleshooter says driver software MTP USB problem, what do I need to do?

    My iPad2 went blank. Troubleshooter says driver software MTP USB problem, what do I need to do?

    iOS: Resolving update and restore alert messages
    For error -50: See error 13 and 14: 
    Error 13 and 14: These errors are typically resolved by performing one or more of the steps listed below:
    Perform USB isolation troubleshooting, including trying a different USB port directly on the computer. See the advanced steps below for USB troubleshooting.
    Put a USB 2.0 hub between the device and the computer.
    Try a different USB 30-pin dock-connector cable.
    Eliminate third-party security software conflicts.
    There may be third-party software installed that modifies your default packet size in Windows by inserting one or more TcpWindowSize entries into your registry. Your default packet size being set incorrectly can cause this error. Contact the manufacturer of the software that installed the packet-size modification for assistance. Or, follow this article by Microsoft: How to reset Internet Protocol (TCP/IP) to reset the packet size back to the default for Windows.
    Connect your computer directly to your Internet source, bypassing any routers, hubs, or switches. You may need to restart your computer and modem to get online.
    Try to restore from another known-good computer and network.

  • Data network locked down when usb tethering with a lot of request (i.e. 3 to 4 tab pages and IRC)

    Hi, i am currently using the usb tethering on my ubuntu desktop(this also happened in win8 desktop) which the data network will be locked down when open 3 to 4 tab pages in 3-4 seconds or requesting large amount of data traffic (i.e. downloading movie)
    This locked down will be recovered only  after a few minutes (4 minutes at least) when there is no more request maked.
    OR reboot the phone again. 
    This doesn't affect receiving calls, only the data network is locked down
    I do see this is a software problem as i have asked for a exchange for phone, the same thing happened again.
    Does anyone get the same problem as i experienced?
    The firmware is v.114 
    Thanks for help

    Hi z1CUser
      based on your information, i believe there is not problem with the phone, since even second phone is doing same thing as first, what I can suggest is
    >check with different phone if possible and see whether it does same, incase 'Yes" then its might be with the internet connection i believe, you can give a call to Internet Service Provider, stating the issue faced in 2 different phones
    >if possible Refresh the Router and try to connect it again
    >Last you can try to restore the phone once
    Manjuboyz
    NOTE:
    Rate me(Kudos) If you are happy with my Resolution, Thanks

Maybe you are looking for