RE: Disabling USB mass storage

From: William Morlett (wmorlett_at_socal.rr.com)
Date: 03/09/05

  • Next message: Marc Fossi: "SecurityFocus Microsoft Newsletter #231" 
    To: "'Alvaro Prieto'" <alvaro@apg88.com>, "'Victor Pereira'" <pelasaco@gmail.com>
Date: Tue, 8 Mar 2005 15:36:13 -0800

    Assuming you are working in a corporate environment I like Mark Teicher's
    Securewave recommendation. Cisco's Security Agent is another centrally
    managed alternative. A few years ago Cisco purchased Okena which had a
    product called Stormwatch. That product is now CSA (Cisco Security Agent).
    Both Securewave and Cisco Security Agent are referred to as 2nd generation
    desktop security solutions and offer the ability to prevent/allow data
    transfer for any I/O device.

    -----Original Message-----
    From: Alvaro Prieto [mailto:alvaro@apg88.com]
    Sent: Tuesday, March 08, 2005 10:48 AM
    To: Victor Pereira
    Cc: focus-ms@securityfocus.com
    Subject: Re: Disabling USB mass storage

    How about getting USB to PS2 adapter for those who have a usb mouse?
    Like this one here: http://sewelldirect.com/PS2toUSB.asp

    Alvaro

    Victor Pereira wrote:

    >And what about W2k ? I can't use GPO to restrict usb read/writing..
    >does exist any solution without a 3rd part software ?
    >
    >
    >On Sun, 6 Mar 2005 03:20:42 -0800 (PST), sanjiv <ska262001@yahoo.co.in>
    wrote:
    >
    >
    >>we are doing the same for the time being but now system come with USB
    >>mouse and hence the problem. Is it possible to restrict by some means
    >>this USB port to use only USB mouse?
    >>
    >>Is there a tool or someway to detect all systems on the domain where
    >>USB port is open? <As a cross-check and to be double sure>
    >>
    >>Best regards,
    >>Sanjiv
    >>
    >>
    >>--- Bob <Bob@dexis.net> wrote:
    >>
    >>
    >>
    >>>Why not just disable the USB in bios and set a password on the bios
    >>>for setup?
    >>>
    >>>Works for me all the time.
    >>>
    >>>Bob
    >>>
    >>>
    >>>
    >>>
    >>>
    >>>Mark Teicher wrote:
    >>>
    >>>
    >>>>Sanctuary from SecureWave <www.securewave.com> is
    >>>>
    >>>>
    >>>good for locking down other external connectors also from an
    >>>enterprise perspective
    >>>
    >>>
    >>>>-----Original Message-----
    >>>>From: Lynn Preston <saint_vitus@arcticmail.com>
    >>>>Sent: Mar 3, 2005 3:18 PM
    >>>>To: Martin a Marika TYDOROVCI <tydy@szm.sk>,
    >>>>
    >>>>
    >>>focus-ms@securityfocus.com
    >>>
    >>>
    >>>>Subject: Re: Disabling USB mass storage
    >>>>
    >>>>Martin,
    >>>>Not sure of your specific requirements, but
    >>>>
    >>>>
    >>>there's a software title by the name of DeviceLock that works well.
    >>>
    >>>
    >>>>It works well with all devices. The only drawback
    >>>>
    >>>>
    >>>is that if the user is a member of the Local Admin group, they
    >>>
    >>>
    >>>>can alter the settings.
    >>>>
    >>>>http://devicelock.securitybyte.com/
    >>>>
    >>>>Just some more thoughts. Take Care !
    >>>>
    >>>>- Lynn Preston
    >>>>
    >>>>
    >>>>----- Original Message -----
    >>>>From: "Martin a Marika TYDOROVCI" <tydy@szm.sk>
    >>>>To: focus-ms@securityfocus.com
    >>>>Subject: Disabling USB mass storage
    >>>>Date: Wed, 02 Mar 2005 21:10:08 +0100
    >>>>
    >>>>
    >>>>
    >>>>
    >>>>>Hi list,
    >>>>>
    >>>>>Does anyone knows a way to disable USB mass
    >>>>>
    >>>>>
    >>>storage device in Win
    >>>
    >>>
    >>>>>XP? I need to disable using devices such as USB
    >>>>>
    >>>>>
    >>>flash drive, card
    >>>
    >>>
    >>>>>readers, etc.
    >>>>>
    >>>>>Regards
    >>>>>
    >>>>>
    >>>>>
    >>>>--------------------------------------------------------------------
    >>>>-------
    >>>>
    >>>>
    >>>>--------------------------------------------------------------------
    >>>>-------
    >>>>
    >>>>
    >>>>
    >>>>
    >>>
    >>>
    >>----------------------------------------------------------------------
    >>-----
    >>
    >>
    >>----------------------------------------------------------------------
    >>-----
    >>
    >>
    >>>
    >>>
    >>__________________________________
    >>Celebrate Yahoo!'s 10th Birthday!
    >>Yahoo! Netrospective: 100 Moments of the Web
    >>http://birthday.yahoo.com/netrospective/
    >>
    >>----------------------------------------------------------------------
    >>-----
    >>----------------------------------------------------------------------
    >>-----
    >>
    >>
    >>
    >>
    >
    >-----------------------------------------------------------------------
    >----
    >-----------------------------------------------------------------------
    >----
    >
    >
    >
    >
    >

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

  • Next message: Marc Fossi: "SecurityFocus Microsoft Newsletter #231"