Locking down CD roms, USB mass storage devices and Floppy disk dri

J

Jordan Fey

I'm in a very security concious company which wants access to CD-Rom drives,
floppy disk drives & USB mass storage devices restricted to the majority of
machines. This is easy enough in itself, Ive used an group policy ADM to set
the "start" values for "SYSTEM\CurrentControlSet\Services\USBSTOR",
"SYSTEM\CurrentControlSet\Services\Cdrom",
"SYSTEM\CurrentControlSet\Services\Flpydisk" and
"SYSTEM\CurrentControlSet\Services\Sfloppy" accordingly so as the devices are
disabled via registry.

The issue I have is granting access to those users who are authorised to use
these devices. At present I am applying these settings individually to
different OU's however a multitude of group policies takes a lot longer to
apply than a single, large group policy.

What I would like to do is create a script to temporarily amend these
settings back via regedit which the users can run vioa an ICON & a=only
authorised users can access. The problem with this is that it only works for
USB mass-storage devices. All the others only re-enable on reboot. Does
anyone know of a way around this?

Jordan
 
U

Uwe Sieber

What about setting the services to 'manual' and let
start them by the admin manually by means of
net start xxx
or
sc start xxx

Restricted users should get an 'access denied' when
trying this.


Uwe
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

CDFS on USB mass storage device 2
USB Storage devices asking for device drivers 3
storage device access privileges for my users 2
USB mass storage devices won't work 7
USB Mass storage device shows up in device man but not in disk man 5
Ext USB HDD appearing as Hard Disk drive instead of Removable Stor 2
Block Floppy, CDRom, USB 1
USB mass Storage Devices Not working 9

Top