RE: Disabling USB mass storage

From: Snitchler, Matthew (MDSNITC_at_sandia.gov)
Date: 03/08/05

  • Next message: William Morlett: "RE: Disabling USB mass storage"
    Date: Tue, 8 Mar 2005 12:13:15 -0700
    To: focus-ms@securityfocus.com
    
    

    Change the permissions of usbstor.inf so users don't have access to it,
    the usb ports will still work with mice, keyboards, etc and NOT mass
    storage devices.

    Matt

    -----Original Message-----
    From: sanjiv [mailto:ska262001@yahoo.co.in]
    Sent: Sunday, March 06, 2005 4:21 AM
    To: Bob@dexis.net; focus-ms@securityfocus.com
    Subject: Re: Disabling USB mass storage

    we are doing the same for the time being but now system come with USB
    mouse and hence the problem. Is it possible to restrict by some means
    this USB port to use only USB mouse?

    Is there a tool or someway to detect all systems on the domain where USB
    port is open? <As a cross-check and to be double sure>

    Best regards,
    Sanjiv

    --- Bob <Bob@dexis.net> wrote:

    > Why not just disable the USB in bios and set a password on the bios
    > for setup?
    >
    > Works for me all the time.
    >
    > Bob
    >
    >
    >
    >
    >
    > Mark Teicher wrote:
    > > Sanctuary from SecureWave <www.securewave.com> is
    > good for locking down other external connectors also from an
    > enterprise perspective
    > >
    > >
    > > -----Original Message-----
    > > From: Lynn Preston <saint_vitus@arcticmail.com>
    > > Sent: Mar 3, 2005 3:18 PM
    > > To: Martin a Marika TYDOROVCI <tydy@szm.sk>,
    > focus-ms@securityfocus.com
    > > Subject: Re: Disabling USB mass storage
    > >
    > > Martin,
    > > Not sure of your specific requirements, but
    > there's a software title by the name of DeviceLock that works well.
    > > It works well with all devices. The only drawback
    > is that if the user is a member of the Local Admin group, they
    > > can alter the settings.
    > >
    > > http://devicelock.securitybyte.com/
    > >
    > > Just some more thoughts. Take Care !
    > >
    > > - Lynn Preston
    > >
    > >
    > > ----- Original Message -----
    > > From: "Martin a Marika TYDOROVCI" <tydy@szm.sk>
    > > To: focus-ms@securityfocus.com
    > > Subject: Disabling USB mass storage
    > > Date: Wed, 02 Mar 2005 21:10:08 +0100
    > >
    > >
    > >>Hi list,
    > >>
    > >>Does anyone knows a way to disable USB mass
    > storage device in Win
    > >>XP? I need to disable using devices such as USB
    > flash drive, card
    > >>readers, etc.
    > >>
    > >>Regards
    > >>
    >
    >>----------------------------------------------------------------------
    >>-----
    >
    >>----------------------------------------------------------------------
    >>-----
    > >
    > >
    >
    >
    ------------------------------------------------------------------------

    ---
    >
    ------------------------------------------------------------------------
    ---
    > 
    > 
    	
    		
    __________________________________
    Celebrate Yahoo!'s 10th Birthday! 
    Yahoo! Netrospective: 100 Moments of the Web
    http://birthday.yahoo.com/netrospective/
    ------------------------------------------------------------------------
    ---
    ------------------------------------------------------------------------
    ---
    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------
    

  • Next message: William Morlett: "RE: Disabling USB mass storage"

    Relevant Pages

    • Software Raid - Raid 1 mit zwei HDDs macht Probleme
      ... USB device using ehci_hcd and address 2 ... Storage driver... ... for USB Mass Storage devices ... setrlimit) failed: Operation not permitted ...
      (de.comp.os.unix.linux.misc)
    • Re: USB CompactFlash card reader
      ... >> USB Mass Storage devices are seen as SCSI disks. ... to use uhci since it doesn't work well at all with mass storage devices. ...
      (comp.os.linux.hardware)
    • Re: Disable Usage of USB storage Devices
      ... > allowing the needed usb devices to be attached. ... > operating systems on cdrom such as Knoppix and Bart's PE that could allow a ... > This feature provides the ability to set a registry key that will prevent ... > write operations to USB block storage devices, ...
      (microsoft.public.win2000.security)
    • [SLE] mounting USB disk?
      ... I'm trying to mount an external USB storage device. ... USB CDROM drives and solid-state 'keychain' storage devices and USB ... I believe I was last successful on a SuSE 8.0 laptop. ...
      (SuSE)
    • Re: Disable Usage of USB storage Devices
      ... There is no effective solution using the native operating system. ... look at using computer cases that block access to the usb ports while still ... allowing the needed usb devices to be attached. ... write operations to USB block storage devices, ...
      (microsoft.public.win2000.security)