I have Windows XP Pro PCs (and a few Windows 2K PCs). I need to prevent people from running apps (exe, com, etc) from a floppy, CD, and memory stick. How can I accomplish this?
Thanks!
D'Ann
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Answer: DeviceLock!
Download it from here: http://www.pcsoftland.com/
I use Anti-Executable from http://www.faronics.com/ht
I work in a public library. We have computer labs, so that people can work on their resumes, homework, email, or just play games. We need to allow access to the floppy drives, CD-ROM drives, and USB drives.The C drive is hidden, so they can't see it to save files to. We just don't want people launching apps from their media. We've had some kids that are trying to use hacking tools they bring in on their own media. Some of these programs don't require setup.exe or install.exe - they just run from the CD or memory stick. I was just wondering if I can block executables from running from a CD/USB/floppy drive.
Thanks again,
D'Ann
D'Ann,
The Local Security Settings approach that I described above will do this. There is a list of file types that goes along with this (I didn't mention it because it already includes most executable file types). The restrictions apply only to the paths that you specify. Users can still access their text files, doc files, etc., from the removable media.
You will want to make sure that users can only log on with restricted accounts also (that is, not with Administrator privileges). Make sure the Admin accounts have good, strong passwords. You probably should start reading hacking web sites, too, to see what the young and restless are up to.
Business Accounts
Answer for Membership
by: joe-quickPosted on 2005-05-31 at 16:30:19ID: 14117766
You could could disable the floppy, CD rom and usb port from the motherboard bios.
Hit the 'Delete' key when prompted during the boot to access the bios.