cdrom & floppy lock

[LJ]

All,
Environment:
Domain: Windows 2000 AD
Desktops: Windows XP (SP1)

Does anyone know how to prevent ("lock") non admin users from using the
cdrom and floppy drives? Windows NT had cdromlock and floppylock, which I
believe came from the resource kit. However, I haven't found anything like
that for 2000/XP. Thanks.

 

[Guest]

Have you tried using Google ;-)

Windows 2000 Resource Kit has floplock.
Here's a program for locking CDROM:
-- http://www.toplang.com/cdromlock.htm

 

[Brandon McCombs]

All,
Environment:
Domain: Windows 2000 AD
Desktops: Windows XP (SP1)

Does anyone know how to prevent ("lock") non admin users from using the
cdrom and floppy drives? Windows NT had cdromlock and floppylock, which I
believe came from the resource kit. However, I haven't found anything like
that for 2000/XP. Thanks.

Group policies allow a setting(under User configuration->system I believe) for
preventing access and hiding access to any drive you want. By default they
only let you configure access up to drive D. You have to edit the system.adm
file if you want to go clear up to drive Z. Only applications that adhere to
Windows security APIs will go along with the enforcement of the group policy
though. Older apps will still let you write to the floppy despite what the
group policy may state but it works for the users I have at work.