Re: how to controll / restrict access to USB Flash Disks
From: Selcuk Demiray (firstname.lastname@example.org)
- Next message: Bill Scott: "Internet Connection Sharing and Home Networking Problems."
- Previous message: Bill Scott: "IPSEC Policy Agent"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Selcuk Demiray" <email@example.com> Date: Sun, 2 Feb 2003 23:01:11 +0200
You can try disabling the "Removable Storage" service by using Group Policy.
I did not personally try it but IMHO it should work.
"Ernie" <firstname.lastname@example.org> wrote in message
> Any idea how to controll / restrict access to removable media like the
> USB mass storage / USB Flash Disks ???
> Controlling access to removable media (Win2K) can be easily set with:
> - AllocateFloppies
> - AllocateCDRoms
> - Allocatedasd
> ===> Why isn't there a AllocateUSBmassStorage or so ????
> It appears that Windows2000 is shipped with all required (USB mass
> drivers for USB Flash Disks. Even in a tightly restricted Win2K+SP3 client
> setup every domain user can will have access to the USB memory (no
> administrator or power user priveliges required to "install" this kind of
> driver): After plug-in of the device the driver will be installed and the
> first available drive letter will be assigned to the USB mass storage
> We would like to restrict access to these drives (preferable not just
> them), like we restrict floppy and cdrom drives, since this (in our case)
> a SECURITY issue. Are we overlooking something, or is this a bug in the
> "Allocate_Floppies/CDRoms/DASD" policies as mentioned above ???
> Simply disabeling the (f.i.) USBSTOR.SYS would not work, since it is
> required when using USB mouses/keyboards.
> Disabling USB on system BIOS level isnt really an option either.
> ===> Any idea of possible solutions (standard Win2k, SP4 feature
> comming soon, third party software) ???
> Thanks, for any info on this subject. Even good old Google doesn't point
> in the right direction :-)