storage device access privileges for my users

[Sleepless in New Jersey]

Because of a serious security breech, I have been instructed to make all
(Windows XP) internal and external storage devices read-only for my users. I
used Safe Mode to limit user hard dive access to read, list, and read and
execute. I couldn't find a way to do this with the floppy and optical
drives. I have searched through both Computer Management and Policy without
finding anything that perform these tasks.

I have looked through Computer Management and Policy but found nothing.

I have directions to prevent users from attaching their own USB drives by
editing the Registry as follows:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsbStor, clicking Start
and and typing 4 in the value box. I could restore access by returning the
value to 3. However, when I opened Start, the default value shown was 1. I
changed it to 2…….and found that I couldn’t access the USB drives in the
Administrator account.

When I looked through CurrentControlSet, I found these entries:

1. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Flpydisk
2. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CDROM

Both of these had Start files with value boxes in them. The default values
were 1.

I would greatly appreciate some help with these items.

BTW: When I was notified of the need to make the foregoing changes, the
Powers That Be disabled our Internet access. I was given to understand that
I should forget about restoring it until I have made and demonstrated the
changes.

 

[Leonard Grey]

No matter how many times you post the same question...the answer doesn't
change.

 

[Rick Merrill]

Because of a serious security breech, I have been instructed to make all
(Windows XP) internal and external storage devices read-only for my users. I
used Safe Mode to limit user hard dive access to read, list, and read and
execute. I couldn't find a way to do this with the floppy and optical
drives. I have searched through both Computer Management and Policy without
finding anything that perform these tasks.

I have looked through Computer Management and Policy but found nothing.

I have directions to prevent users from attaching their own USB drives by
editing the Registry as follows:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsbStor, clicking Start
and and typing 4 in the value box. I could restore access by returning the
value to 3. However, when I opened Start, the default value shown was 1. I
changed it to 2…….and found that I couldn’t access the USB drives in the
Administrator account.

When I looked through CurrentControlSet, I found these entries:

1. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Flpydisk
2. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CDROM

Both of these had Start files with value boxes in them. The default values
were 1.

I would greatly appreciate some help with these items.

BTW: When I was notified of the need to make the foregoing changes, the
Powers That Be disabled our Internet access. I was given to understand that
I should forget about restoring it until I have made and demonstrated the
changes.

You have to disable plug-n-play for windows in order to stop the
unauthorized from plugging in their own devices.