jmcnear
asked on
USB jumpdrives
Hello,
How can I allow the use of USB jumpdrives for reading/writing, but restrict executing???
These are for public internet machines running win2k with GP applied.
How can I allow the use of USB jumpdrives for reading/writing, but restrict executing???
These are for public internet machines running win2k with GP applied.
You can't. At least I've never seen a way. If the drives are NTFS MAYBE you can, but if you can't control the USB jump drives attached to it, I don't see any way this is possible.
You may be able to use the Application Security Registration tool (appsec.exe) to allow the users access to only a pre-defined set of applications. This will ensure that Users can only access certain applications as pre-defined by an Administrator.
More information can be found here: http://www.microsoft.com/windows2000/techinfo/reskit/tools/hotfixes/appsec-o.asp
Al
More information can be found here: http://www.microsoft.com/windows2000/techinfo/reskit/tools/hotfixes/appsec-o.asp
Al
how are these users allowed to logon... or is the station logged on all the time for their use...
can you throttle their abilities thru their logon name (hopefully they are not on as admins)????
can you throttle their abilities thru their logon name (hopefully they are not on as admins)????
ASKER
they are logged in all the time, but not as admins, but rather a regular user. I apply GPO at start up and logon time.
Is there a gpo option regarding usb drives?
Is there a gpo option regarding usb drives?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.