Re: how to controll / restrict access to USB Flash Disks

From: Selcuk Demiray (
Date: 02/02/03

From: "Selcuk Demiray" <>
Date: Sun, 2 Feb 2003 23:01:11 +0200

You can try disabling the "Removable Storage" service by using Group Policy.
I did not personally try it but IMHO it should work.


"Ernie" <> wrote in message
> Any idea how to controll / restrict access to removable media like the
> USB mass storage / USB Flash Disks ???
> Controlling access to removable media (Win2K) can be easily set with:
> HKLM\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Winlogon
> - AllocateFloppies
> - AllocateCDRoms
> - Allocatedasd
> ===> Why isn't there a AllocateUSBmassStorage or so ????
> It appears that Windows2000 is shipped with all required (USB mass
> drivers for USB Flash Disks. Even in a tightly restricted Win2K+SP3 client
> setup every domain user can will have access to the USB memory (no
> administrator or power user priveliges required to "install" this kind of
> driver): After plug-in of the device the driver will be installed and the
> first available drive letter will be assigned to the USB mass storage
> device.
> We would like to restrict access to these drives (preferable not just
> them), like we restrict floppy and cdrom drives, since this (in our case)
> a SECURITY issue. Are we overlooking something, or is this a bug in the
> "Allocate_Floppies/CDRoms/DASD" policies as mentioned above ???
> Simply disabeling the (f.i.) USBSTOR.SYS would not work, since it is
> required when using USB mouses/keyboards.
> Disabling USB on system BIOS level isnt really an option either.
> ===> Any idea of possible solutions (standard Win2k, SP4 feature
> comming soon, third party software) ???
> Thanks, for any info on this subject. Even good old Google doesn't point
> in the right direction :-)
> Regards,
> Erwin