Prevent USB drive use?

[john]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Is there a policy or any other way to prevent use of USB drives (besides
disabling the USB ports (we need them for printers, but the drives are
secirity/virus risks))?

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

You can completely disable USB ports by using Group Policy to disable
usbstor.sys but there is no easy way to prevent users copying files over
USB. (I assume that's what you're worried about?)

XP SP2 introduced a new registry key that will allow you to make USB flash
drives read-only, but this is of limited use as it wont stop them plugging
in a USB CDRW and getting files that way, it may be of some use to you
though. This is the link:
http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/sp2otech.mspx#ECAA

Other than that, a 3rd party product may be your best bet, I have seen a
product before that offers enterprise wide control over USB ports but can't
remember what it's called I'm afraid :-(

"John" <noSPAM@please.net> wrote in message
news:OR4zjum%23EHA.704@tk2msftngp13.phx.gbl...
> Is there a policy or any other way to prevent use of USB drives (besides
> disabling the USB ports (we need them for printers, but the drives are
> secirity/virus risks))?
>

 

[john]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Great, thanks for the help!

"Simon Geary" <simon_geary@hotmail.com> wrote in message
news:Ozpj$Xo%23EHA.612@TK2MSFTNGP09.phx.gbl...
> You can completely disable USB ports by using Group Policy to disable
> usbstor.sys but there is no easy way to prevent users copying files over
> USB. (I assume that's what you're worried about?)
>
> XP SP2 introduced a new registry key that will allow you to make USB flash
> drives read-only, but this is of limited use as it wont stop them plugging
> in a USB CDRW and getting files that way, it may be of some use to you
> though. This is the link:
> http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/sp2otech.mspx#ECAA
>
> Other than that, a 3rd party product may be your best bet, I have seen a
> product before that offers enterprise wide control over USB ports but
> can't remember what it's called I'm afraid :-(
>
> "John" <noSPAM@please.net> wrote in message
> news:OR4zjum%23EHA.704@tk2msftngp13.phx.gbl...
>> Is there a policy or any other way to prevent use of USB drives (besides
>> disabling the USB ports (we need them for printers, but the drives are
>> secirity/virus risks))?
>>
>
>

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Hi

> Is there a policy or any other way to prevent use of USB drives
> (besides disabling the USB ports (we need them for printers, but
the
> drives are secirity/virus risks))?

I did this by disabling the Drive Letters. It works great. I have
Hidden Drives C:, A:, and my mapped drives (they can still access them
but not see them) and disabled Access to D: through Z: Info on how to
do it here: http://www.sd61.bc.ca/windows2000/HideDrives.htm

Cheers,

Lara

--
Posted using the http://www.WindowsForumz.com/ interface, at author's request
Articles individually checked for conformance to usenet standards
Topic URL: http://www.WindowsForumz.com/Group-Policy-Prevent-USB-drive-ftopict250741.html
Visit Topic URL to contact author (reg. req'd). Report abuse: http://www.WindowsForumz.com/eform.php?p=770213

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

"John" <noSPAM@please.net> said

> Is there a policy or any other way to prevent use of USB drives (besides
> disabling the USB ports (we need them for printers, but the drives are
> secirity/virus risks))?
>
>

Try GFI Portable Storage Control. It works for USB/firewire hard drives, usb
keys, digital cameras etc. Basically any external storage can be controlled.

http://www.gfi.com/lanpsc/



--

Andy.