removable media

A

Andy

Hi
Is there a way to stop users using removable media such
as usb drives, i can disable floppy etc but cant find an
option for usb!
I want to stop "certain users" not all computers or users.
I have some people running programs they should not be
running.
Thanks
Andy
 
S

Steven L Umbach

That is extremely difficult in W2K selectively. XP Pro uses Software Restriction
Polices to restrict users on what software to run. Making sure that users are only
regular users and not administrators or power users will go a long way to stop such
also. Disabling USB ports in cmos and password protecting cmos settings is one
strategy, but that will not work if other users need access. There are also third
party applications such as Device Lock that may be able to do what you want and I
think you can try it for free. You can also use Group Policy user
configuration/administrative templates/system - "don not run specified Windows
Applications to try and restrict users. It usually helps to put install.exe and
setup.exe in the list also. --- Steve

http://www.protect-me.com/dl/
http://support.microsoft.com/default.aspx?scid=kb;en-us;323525
 
S

Subrahmanya Bhandarkar [MSFT]

Hi Try this below link
http://support.microsoft.com/default.aspx?scid=kb;en-us;823732

HOW TO: Disable the Use of USB Storage Devices in Windows XP
View products that this article applies to.
IMPORTANT: This article contains information about modifying the registry.
Before you modify the registry, make sure to back it up and make sure that
you understand how to restore the registry if a problem occurs. For
information about how to back up, restore, and edit the registry, click the
following article number to view the article in the Microsoft Knowledge
Base:
256986 Description of the Microsoft Windows Registry

IN THIS TASK
SUMMARY
To Disable the Use of USB Storage Devices in Windows XP

If a USB Storage Device Is Not Already Installed on the Computer
If a USB Storage Device Is Already Installed on the Computer
SUMMARY
This article discusses two methods that you can use to prevent users from
connecting to a USB storage device on a Windows XP-based computer.

back to the top
To Disable the Use of USB Storage Devices in Windows XP
To disable the use of USB storage devices in Windows XP, use one of the
following procedures, as appropriate to your situation:

back to the top
If a USB Storage Device Is Not Already Installed on the Computer
If a USB storage device is not already installed on the computer, assign
the user or the group Deny permissions to the following files:
%SystemRoot%\Inf\Usbstor.pnf
%SystemRoot%\Inf\Usbstor.inf
When you do so, users cannot install a USB storage device on the computer.
To assign a user or group Deny permissions to the Usbstor.pnf and
Usbstor.inf files, follow these steps:
Start Windows Explorer, and then locate the %SystemRoot%\Inf folder.
Right-click the Usbstor.pnf file, and then click Properties.
Click the Security tab.
In the Group or user names list, click the user or group that you want to
set Deny permissions for.
In the Permissions for UserName or GroupName list, click to select the Deny
check box next to Full Control, and then click OK.
Right-click the Usbstor.inf file, and then click Properties.
Click the Security tab.
In the Group or user names list, click the user or group that you want to
set Deny permissions for.
In the Permissions for UserName or GroupName list, click to select the Deny
check box next to Full Control, and then click OK.
back to the top
If a USB Storage Device Is Already Installed on the Computer
WARNING: If you use Registry Editor incorrectly, you may cause serious
problems that may require you to reinstall your operating system. Microsoft
cannot guarantee that you can solve problems that result from using
Registry Editor incorrectly. Use Registry Editor at your own risk. If a USB
storage device is already installed on the computer, set the Start value in
the following registry key to 4:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsbStor

When you do so, the USB storage device does not work when the user connects
the device to the computer. To set the Start value, follow these steps:
Click Start, and then click Run.
In the Open box, type regedit, and then click OK.
Locate, and then click the following registry key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsbStor

In the right pane, double-click Start.
In the Value data box, type 4, click Hexadecimal (if it is not already
selected), and then click OK.
Quit Registry Editor.
back to the top




Subbu
This posting is provided "AS IS" with no warranties, and confers no rights.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top