Re: USB Restriction for WinXP

Jon,

This should do what you need....the drivers are manufacturer and model specific typically....you could order some USB devices that are not typically readily available to reduce some more of this risk. Give it a test and see what you find. I am not sure but it may be device specific...in that I mean that this may do what you want...but it's been a while since I had to do it...

Regards,
Mr. Grey
Security, it's what I do...
http://www.redsphereglobal.com

Jon wrote:
Hi,

Thanks for the feedback. Is it possible to allow only a specific USB device and disable the rest. Like they can only use the corporate usb storage but they cannot use there personal usb storage.

Regards,

"Mr. Grey" wrote:

Jon wrote:
Is it possible to restrict USB storage device but allow only a specific USB storage to run on a pc under windows xp? I believe that Vista support this group policy that can assign a specific usb storage device can be used in a workstation.
Jon,

The USB installation function in Windows XP is located under Windows/inf, specifically the files usbstor.inf and usbstor.pnf

You will want to have all "authorized" usb devices installed and running before doing anything with these files, once this is done you need to deny access to the "System" built-in user group for the XP computer. This will disable any other usb devices from being able to run.

from the CLI you can do the following:

cd c:\windows\inf
cacls usbstor.inf /p system:n
cacls usbstor.pnf /p system:n

This is of course all assuming that you have windows installed under c:\windows

To reverse the operation simply give access back to system or change the n to a f in the above CLI example.

Regards,
Mr. Grey
Security Overwhelming
http://www.redsphereglobal.com


.

Relevant Pages

  • Re: DRIVER_IRQL_NOT_LESS_OR_EQUAL
    ... This is a Microsoft driver on the Windows XP CD. ... installation, I downloaded the driver forthe audiomedia controller ... keyboard and mouse there was a hike of usb devices ...
    (microsoft.public.windowsxp.general)
  • Re: USB devices slow boot time of Windows XP Professional
    ... I found that the pc would take excessive time between the text boot ... of windows xp and the gui during the inialization of the usb devices only ... Then when in windows the mouse wouldnt ... the standard hid compliant drivers. ...
    (microsoft.public.windowsxp.hardware)
  • Re: Serious Question - Mainstream Use - No Troll
    ... USB devices such as memory sticks, external drives, MP3 ... etc. just don't work automatically like in Windows XP. ... >> they get it to work with SuSE (or ANY Linux System). ... In any case, I'll bite too. ...
    (alt.os.linux.suse)
  • RE: Security with USB Devices
    ... "The buffer-overflow flaw is in device drivers that Windows loads ... operating systems, including Windows XP and Windows 2000, said Caleb ... but will not release details of the security hole. ... > Subject: Security with USB Devices ...
    (Pen-Test)
  • RE: Controlling specific USB devices on Windows XP
    ... Controlling specific USB devices on Windows XP ... only specific USB storage devices are allowed on a system? ...
    (Focus-Microsoft)