Archived from groups: microsoft.public.win2000.group_policy (More info?)

Is there a policy or any other way to prevent use of USB drives (besides  
disabling the USB ports (we need them for printers, but the drives are  
secirity/virus risks))?

Archived from groups: microsoft.public.win2000.group_policy (More info?)

You can completely disable USB ports by using Group Policy to disable  
usbstor.sys but there is no easy way to prevent users copying files over  
USB. (I assume that's what you're worried about?)
 
XP SP2 introduced a new registry key that will allow you to make USB flash  
drives read-only, but this is of limited use as it wont stop them plugging  
in a USB CDRW and getting files that way, it may be of some use to you  
though. This is the link:
http://www.microsoft.com/technet/p [...] .mspx#ECAA
 
Other than that, a 3rd party product may be your best bet, I have seen a  
product before that offers enterprise wide control over USB ports but can't  
remember what it's called I'm afraid :-(
 
"John" <noSPAM@please.net> wrote in message  
newsR4zjum%23EHA.704@tk2msftngp13.phx.gbl...
> Is there a policy or any other way to prevent use of USB drives (besides  
> disabling the USB ports (we need them for printers, but the drives are  
> secirity/virus risks))?
>

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Great, thanks for the help!
 
"Simon Geary" <simon_geary@hotmail.com> wrote in message  
newszpj$Xo%23EHA.612@TK2MSFTNGP09.phx.gbl...
> You can completely disable USB ports by using Group Policy to disable  
> usbstor.sys but there is no easy way to prevent users copying files over  
> USB. (I assume that's what you're worried about?)
>
> XP SP2 introduced a new registry key that will allow you to make USB flash  
> drives read-only, but this is of limited use as it wont stop them plugging  
> in a USB CDRW and getting files that way, it may be of some use to you  
> though. This is the link:
> http://www.microsoft.com/technet/p [...] .mspx#ECAA
>
> Other than that, a 3rd party product may be your best bet, I have seen a  
> product before that offers enterprise wide control over USB ports but  
> can't remember what it's called I'm afraid :-(
>
> "John" <noSPAM@please.net> wrote in message  
> newsR4zjum%23EHA.704@tk2msftngp13.phx.gbl...
>> Is there a policy or any other way to prevent use of USB drives (besides  
>> disabling the USB ports (we need them for printers, but the drives are  
>> secirity/virus risks))?
>>
>
>

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Hi
 
 > Is there a policy or any other way to prevent use of USB drives
 > (besides disabling the USB ports (we need them for printers, but
the
 > drives are secirity/virus risks))?
 
I did this by disabling the Drive Letters. It works great. I have
Hidden Drives C:, A:, and my mapped drives (they can still access them
but not see them) and disabled Access to D: through Z:  Info on how to
do it here: http://www.sd61.bc.ca/windows2000/HideDrives.htm
 
Cheers,
 
Lara
 
--  
Posted using the http://www.WindowsForumz.com/ interface, at author's request
Articles individually checked for conformance to usenet standards
Topic URL: http://www.WindowsForumz.com/Group [...] 50741.html
Visit Topic URL to contact author (reg. req'd).  Report abuse: http://www.WindowsForumz.com/eform.php?p=770213

Archived from groups: microsoft.public.win2000.group_policy (More info?)

"John" <noSPAM@please.net> said
 
> Is there a policy or any other way to prevent use of USB drives (besides  
> disabling the USB ports (we need them for printers, but the drives are  
> secirity/virus risks))?  
>  
>  
 
Try GFI Portable Storage Control. It works for USB/firewire hard drives, usb  
keys, digital cameras etc. Basically any external storage can be controlled.
 
http://www.gfi.com/lanpsc/
 
 
 
--  
 
Andy.