Control User access Devices

  • Thread starter Thread starter Graham
  • Start date Start date
G

Graham

Hi guys,

I REALLY need your help.....

I have a number of PC's all with Windows XP Pro, which
are part of a Windows 2000 Server Domain.

I would like to know how to control user access to
CDRoms, Floppies and USB Ports, e.g. I want to dictate
which users from the domain can and cannot use the CDroms
or Floppies OR USB ports on each of the Windows XP
Machines.

Preferablly I would like to know how to do this using XP
or 2000 Server, or via FREEWARE 3rd party software. Our
company is a charity and as with most charities money is
VERY tight.

Thanks In advance

Graham
 
The last option on this page/link has info on where to
restrict users from the ability to install from removable
media. This pertains to 2003 svr, but I believe it's the
same in this instance for 2000 svr.

I don't know if it goes so far as to restrict all use of
removable media, but it should at least restrict progam
installs.

http://www.microsoft.com/technet/treeview/default.asp?
url=/technet/prodtechnol/windowsserver2003/proddocs/entserv
er/sag_WinInstall_Group_Policy_Users.asp
 
Graham said:
Hi guys,

I REALLY need your help.....

I have a number of PC's all with Windows XP Pro, which
are part of a Windows 2000 Server Domain.

I would like to know how to control user access to
CDRoms, Floppies and USB Ports, e.g. I want to dictate
which users from the domain can and cannot use the CDroms
or Floppies OR USB ports on each of the Windows XP
Machines.
Click to expand...

Hi

For the USB part, take a look here:

http://groups.google.com/[email protected]

http://groups.google.com/[email protected]


To block specified drive letters (will work for floppy and CD-ROM drives
if they are all located at the same drive letters):

Prevent Access to the Contents of Selected Drives
http://www.winguides.com/registry/display.php/1157/

It is the same as this Group Policy setting:

Prevent access to drives from My Computer
(User Configuration\Administrative Templates\Windows Components\Windows
Explorer)

GPO reference:
http://msdn.microsoft.com/library/en-us/gp/340.asp


You should combine it with this one if you want to hide the drives as well:

Hide Drives in My Computer
http://www.winguides.com/registry/display.php/148/

GPO reference:
http://msdn.microsoft.com/library/en-us/gp/239.asp


I have not found any Group Policy setting that disables floppy or CD-ROM
specifically (only one that can disable them from remote access).
 
Back
Top