Re: USB removable disks

If the computers in question are XP Pro there is a registry setting you can
enable to disable write ability to USB drives that can be deployed via Group
Policy startup script or with a custom .adm for computer configuration. I
agree with Ben in having a strict policy and to be careful who you employ as
a determined malicious user will often find a way to capture data even if it
is taking photos or video of the monitor screen.

Steve

http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/sp2otech.mspx

Controlling block storage devices on USB buses
What does controlling block storage devices on USB buses do?
This feature provides the ability to set a registry key that will prevent
write operations to USB block storage devices, such as memory sticks. When
this registry key is enabled, the devices function only as read-only
devices. You can implement this setting as part of a security strategy to
prevent users from transporting data using these devices.

Who does this feature apply to?
. Users who do not want data to be written from their computer to a
USB storage device.

. IT professionals who want to implement organization controls over
the use of USB block storage devices


What settings are added or changed in Windows XP Service Pack 2
Setting name Location Default value Possible values
WriteProtect
HKEY_LOCAL_MACHINE\System\
CurrentControlSet\Control \StorageDevicePolicies
DWORD=0
0 - Disabled

1 - Enabled



"mjn" <none@xxxxxxxx> wrote in message
news:e4BU6ApxGHA.4876@xxxxxxxxxxxxxxxxxxxxxxx
Is it possible to stop users from using usb memory sticks on certain
pc's. Want to do this for trying to stop certain theft of data and also
enforce the use of shares files by the network and shared folders rules.

XP NTFS


.

Relevant Pages

  • Re: How to restrict file access to Domain Computers Only
    ... XP SP2 where you can disable write access to USB devices which can be ... What does controlling block storage devices on USB buses do? ... This feature provides the ability to set a registry key that will prevent ...
    (microsoft.public.windows.server.security)
  • Re: XP SP2 - new way to stop USB key drives
    ... Using Group Policy Objects to hide specified drives in My Computer for ... > I recall seeing a blog or discussion board post with code to create policy> templates for disabling usb sticks, as well as floppy, and cd-roms. ... >> What does controlling block storage devices on USB buses do? ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: XP SP2 - new way to stop USB key drives
    ... I recall seeing a blog or discussion board post with code to create policy ... templates for disabling usb sticks, as well as floppy, and cd-roms. ... > What does controlling block storage devices on USB buses do? ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: XP SP2 - new way to stop USB key drives
    ... I spoke at an IT Managers conference in Kansas City ... I had my powerpoint presentation on a USB disk key, ... >> What does controlling block storage devices on USB buses do? ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: XP SP2 - new way to stop USB key drives
    ... I had my powerpoint presentation on a USB disk key, ... >>>> What does controlling block storage devices on USB buses do? ... >>>> this registry key is enabled, the devices function only as read-only ...
    (microsoft.public.backoffice.smallbiz2000)