Disabling the use of USB Mass Storage Devices

[JCF]

I have been directed recently to disable the use of USB
mass storage devices; mostly so "memory pens".

Is there a way I can implement a group policy to
enable/disable the use of these devices by user? We would
like to give permissions to some users allowing them the
use of the USB pens, while locking out all others. We
have found a Reg-edit option, but that locks out the
machine instead of the user, making the use of any USB
pens completely blocked. If there is no policy
workaround, are there any system tricks?

 

[Guest]

I found this link:

http://support.microsoft.com/default.aspx?scid=kb;en-
us;823732&Product=winxp

Would that work with Active Directory?

 

[TrevorB]

If you want to control who can use these types of devices and control
many others types you could look at something like Disknet Pro from
www.disknetpro.com.