Re: Restrict access to USB flash storage device to console user only

From: ZC Wong (zcwong_at_acm.org)
Date: 04/05/04 

Date: Mon, 05 Apr 2004 19:34:13 +0100

The problem for the INTERACTIVE security group is that terminal service
clients would also be identified as an INTERACTIVE user. It seems that
there is no security group to identify console users.

Steven L Umbach wrote:
> There is no security policy for such. Some have suggested to configure
> security on removeable storage in Computer Management/removable
> storage/properties/security where you could give access to just interactive.
> I have personally never tried that and have my doubts, but it may be worth a
> try. Otherwise there are third party applications such as DeviceLock that
> may be able to control access and may be free to try. You can also modify
> the user right for "access this computer from the network" to generally
> control who can access resources on a computer. --- Steve
>
> http://www.protect-me.com/dl/ -- DeviceLock
>
> "ZC Wong" <zcwong@acm.org> wrote in message
> news:c4n5c9$bf2$1@ucsnew1.ncl.ac.uk...
>
>>Hi,
>>
>>It is possible to restrict floppy and CD-ROM access to console user only
>>in the security policy. But can I do the same for the USB storage
>>devices? For example a CompactFlash card reader, etc?
>>
>>Thanks.
>
>
>

Relevant Pages

  • Re: Limiting access to parts of custom menu
    ... The key to assigning security and NOT having to modify the code each time is ... to ALWAYS assign permissions to a security group, and NOT a users (however, ... only about 12-15 actually have menu bars that matter. ...
    (microsoft.public.access.formscoding)
  • Re: my documents redirection...for SOME users
    ... On your SBS, go to the Server Mgmt Console, Security Groups tab. ... Now go to the Group Policy Management Console. ... policy - I believe it's called Small Business Server Folder Redirection. ... security group to the security filtering section, ...
    (microsoft.public.windows.server.sbs)
  • authorization for areas not working
    ... tried to assign specific users or security groups from the Active Directory ... On the Manage Security Settings for area Area_Name page, ... type the name of the security group from the Active Directory. ...
    (microsoft.public.sharepoint.portalserver)
  • Re: Ethical hacking
    ... > This is a security group rather than a hacker group, ... If someone doesn't attempt to break home security systems using the ... techniques of a burglar, ... "learning" on a system on which you have no authorization is ...
    (alt.computer.security)
  • Re: GP Access Denied (security filtering)
    ... the users mentioned in the security filtering ... with two DC and two Terminal servers. ... My problem is I'm trying to apply a very simple GP to a security group ... for my terminal server computers group and also my "user" security group. ...
    (microsoft.public.windows.group_policy)