<div>
Not quite what I was looking for, but it provided some food for thought.
</div>


Not quite what I was looking for, but it provided some food for thought.

<div>
<div class="content wysiwyg-content">
I need to do the following on a Windows 2000 workstation:<br />
<br />
A) Forbid the execution of any executable file from a USB flash drive (not just .msi), regardless of which drive letter it mounts on, but not prohibit access to other data. &nbsp;<br />
<br />
B) I would prefer to do this via Active Directory Policy push<br />
<br />
C) I don't want to disable all use of the usb drive (via disabling drivers, etc) - I still need to allow read/write access to documents.<br />
<br />
D) I *don't* want to prohibit executable access via CD-ROM <br />
<br />
Thoughts?<br />
-aprilmj
</div>
</div>


I need to do the following on a Windows 2000 workstation:

A) Forbid the execution of any executable file from a USB flash drive (not just .msi), regardless of which drive letter it mounts on, but not prohibit access to other data.  

B) I would prefer to do this via Active Directory Policy push

C) I don't want to disable all use of the usb drive (via disabling drivers, etc) - I still need to allow read/write access to documents.

D) I *don't* want to prohibit executable access via CD-ROM 

Thoughts?
-aprilmj

Prohibiting executable launch via usb flash drives?

Operating system security (OS security) is the process of ensuring OS integrity, confidentiality and availability. OS security refers to specified steps or measures used to protect the OS from threats, viruses, worms, malware or remote hacker intrusions. OS security encompasses all preventive-control techniques, which safeguard any computer assets capable of being stolen, edited or deleted if OS security is compromised, including authentication, passwords and threats to systems and programs.