RE: How to disable all floppy drives on the network

From: Jeremy Rodriguez (jeremyrodriguez_at_cmsmechanical.com)
Date: 12/10/03

  • Next message: Jannie Hanekom: "RE: How to disable all floppy drives on the network" 
    To: "Sakaba" <Sakaba@alexandria.cc>, <focus-ms@securityfocus.com>
Date: Wed, 10 Dec 2003 13:38:54 -0500

    setup a GPO with all of the machines in there and then user config. admin
    template, window component, windows explorer, hide these drives & prevent
    access

    should work, I do it to one box for the c drive.

    -----Original Message-----
    From: Sakaba [mailto:Sakaba@alexandria.cc]
    Sent: Wednesday, December 10, 2003 12:46 AM
    To: focus-ms@securityfocus.com
    Subject: How to disable all floppy drives on the network

    Hi everyone,

    I got a AD network running mostly Win2k and WinXP. All our client PCs
    have floppy drives but I've been asked by management to remove them to
    prevent users from putting data on floppies which short of encrypting
    the files lack security. This is obviously very time consuming so I'm
    looking for a way to simply disable them.

    - The group policy setting that limits access to the locally logged in
    user is no good because the drive still shows up to many applications
    that were installed under local admin.

    - I can disable each drive via AD users/computers-->manage computer (one
    at a time)-->disable floppy device. This is very time consuming because
    I can't manage multiple computers at a time and we are talking about
    thousands of boxes.

    I was thinking maybe a WMI script might do it but I'm a neopyte in that
    area so I'm not sure. Any ideas?

    Best Regards,
    sakaba

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

  • Next message: Jannie Hanekom: "RE: How to disable all floppy drives on the network"

    Relevant Pages

    • Re: Map network drive for user using VB/ASP.NET
      ... you use kerberos and an admin logs on. ... things like a network path, username, etc., and the app would use these ... values in a VB script which could then perform the function (as if we ... From my understanding of mapped network drives, ...
      (microsoft.public.dotnet.framework.aspnet)
    • Re: OT more than virus protection
      ... I put in new hard drives, ... some freeware apps out there that will do an adequate job. ... Don't log in and run as an admin unless you really need ... I do image backups to another same-sized disk, ...
      (rec.crafts.metalworking)
    • Re: Ghost for server
      ... must have for each admin. ... I would recommend these image products for server systems: ... can even map your images as drives. ... It comes with a DOS based restore like any professional ...
      (microsoft.public.windows.server.general)
    • Re: Restrict access to administrative shares?
      ... shares with the reg hack, then just share out the drives you need to access ... as an admin and setup the appropriate permissions. ...
      (microsoft.public.win2000.security)
    • Re: Hide CD-Drive Letter?
      ... created a separate account for him, since merely giving access to the Guest account does not allow internet access. ... I am unable to run the TweakUI utility if I login as the other user since that program refuses to allow those without Admin rights to use the setup files. ... But hiding the drive letter is quite useless. ... to achieve this for internal CDROM drives. ...
      (microsoft.public.windowsxp.general)
    • Quantcast