Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 262
  • Last Modified:

USB jumpdrives

Hello,

How can I allow the use of USB jumpdrives for reading/writing, but restrict executing???

These are for public internet machines running win2k with GP applied.


0
jmcnear
Asked:
jmcnear
1 Solution
 
Lee W, MVPTechnology and Business Process AdvisorCommented:
You can't.  At least I've never seen a way.  If the drives are NTFS MAYBE you can, but if you can't control the USB jump drives attached to it, I don't see any way this is possible.
0
 
AlasdairMcLCommented:
You may be able to use the Application Security Registration tool (appsec.exe) to allow the users access to only a pre-defined set of applications. This will ensure that Users can only access certain applications as pre-defined by an Administrator.

More information can be found here: http://www.microsoft.com/windows2000/techinfo/reskit/tools/hotfixes/appsec-o.asp

Al
0
 
oldgreyguyCommented:
how are these users allowed to logon... or is the station logged on all the time for their use...

can you throttle their abilities thru their logon name (hopefully they are not on as admins)????
0
 
jmcnearAuthor Commented:
they are logged in all the time, but not as admins, but rather a regular user.  I apply GPO at start up and logon time.

Is there a gpo option regarding usb drives?

0
 
waffleironheadCommented:
here is a thread that is similar

http://www.experts-exchange.com/Security/Q_21245935.html


hth
waffle
0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now