Locking Down Drives

[jono]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Can anyone give me the best solution within group policies to stop users
having access to manage hardware devices and prevent access to floppy drives,
cd roms and the insertion of USB keys, or any other peripheral device that
could have narmful files on it.

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Jono explained :
> Can anyone give me the best solution within group policies to stop users
> having access to manage hardware devices and prevent access to floppy drives,
> cd roms and the insertion of USB keys, or any other peripheral device that
> could have narmful files on it.

use the hide drives option
just allow the mapped drives if any and disallow access to every other
driveletter
every device is only accessible thru a drive letter
also take away command prompt
and remove the control panel extension for system
you could also disable context menu for "My computer"

grtz

--
just a suggestion:
http://home.in.tum.de/~jain/software/oe-quotefix/

d;-p

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

>to stop users having access to manage hardware devices and prevent
>access to floppy drives cd roms and the insertion of USB keys, or any
>other peripheral device that could have narmful files on it.

Hi,

The "hide drives" option is great for C:\ and any "mapped" drive
that needs "access but doesn’t need to be seen". However, the
"prevent access to" is even more powerful and actually prevents
access.

You Will have to modify the System.adm file on ALL your DC’s and any
machine that has adminpak.msi on it.
http://www.sd61.bc.ca/windows2000/HideDrives.htm

Cheers,

Lara

--
Posted using the http://www.windowsforumz.com interface, at author's request
Articles individually checked for conformance to usenet standards
Topic URL: http://www.windowsforumz.com/Group-Policy-Locking-Drives-ftopict554143.html
Visit Topic URL to contact author (reg. req'd). Report abuse: http://www.windowsforumz.com/eform.php?p=1760662