Prohibiting executable launch via usb flash drives?

I need to do the following on a Windows 2000 workstation:

A) Forbid the execution of any executable file from a USB flash drive (not just .msi), regardless of which drive letter it mounts on, but not prohibit access to other data.  

B) I would prefer to do this via Active Directory Policy push

C) I don't want to disable all use of the usb drive (via disabling drivers, etc) - I still need to allow read/write access to documents.

D) I *don't* want to prohibit executable access via CD-ROM

Thoughts?
-aprilmj
LVL 3
aprilmjAsked:
Who is Participating?
 
pddhConnect With a Mentor Commented:
not sure about AD

look at Disknet Pro by Reflex Magnetics - www.disknetpro.com.

From memory it performs an authorisation 'scan' if you like on removable media and this could be used to do what you want.

However...  i may be wrong!!!!!!  Let me know how you get along

pdd
0
 
aprilmjAuthor Commented:
Not quite what I was looking for, but it provided some food for thought.
0
All Courses

From novice to tech pro — start learning today.