Re: how to controll / restrict access to USB Flash Disks

From: Selcuk Demiray (sdemiraynospam@veezy.com)
Date: 02/02/03


From: "Selcuk Demiray" <sdemiraynospam@veezy.com>
Date: Sun, 2 Feb 2003 23:01:11 +0200


You can try disabling the "Removable Storage" service by using Group Policy.
I did not personally try it but IMHO it should work.
Regards

Selcuk.

"Ernie" <guess@where.com> wrote in message
news:3e3d22cd$0$2230$e4fe514c@dreader6.news.xs4all.nl...
> Any idea how to controll / restrict access to removable media like the
small
> USB mass storage / USB Flash Disks ???
>
> Controlling access to removable media (Win2K) can be easily set with:
> HKLM\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Winlogon
> - AllocateFloppies
> - AllocateCDRoms
> - Allocatedasd
>
> ===> Why isn't there a AllocateUSBmassStorage or so ????
>
> It appears that Windows2000 is shipped with all required (USB mass
storage)
> drivers for USB Flash Disks. Even in a tightly restricted Win2K+SP3 client
> setup every domain user can will have access to the USB memory (no
> administrator or power user priveliges required to "install" this kind of
> driver): After plug-in of the device the driver will be installed and the
> first available drive letter will be assigned to the USB mass storage
> device.
> We would like to restrict access to these drives (preferable not just
hiding
> them), like we restrict floppy and cdrom drives, since this (in our case)
is
> a SECURITY issue. Are we overlooking something, or is this a bug in the
> "Allocate_Floppies/CDRoms/DASD" policies as mentioned above ???
> Simply disabeling the (f.i.) USBSTOR.SYS would not work, since it is
> required when using USB mouses/keyboards.
> Disabling USB on system BIOS level isnt really an option either.
>
> ===> Any idea of possible solutions (standard Win2k, SP4 feature
> comming soon, third party software) ???
>
> Thanks, for any info on this subject. Even good old Google doesn't point
us
> in the right direction :-)
>
> Regards,
> Erwin
>
>
>
>
>
>
>
>