Link to home
Start Free TrialLog in
Avatar of jmcnear
jmcnear

asked on

USB jumpdrives

Hello,

How can I allow the use of USB jumpdrives for reading/writing, but restrict executing???

These are for public internet machines running win2k with GP applied.


Avatar of Lee W, MVP
Lee W, MVP
Flag of United States of America image

You can't.  At least I've never seen a way.  If the drives are NTFS MAYBE you can, but if you can't control the USB jump drives attached to it, I don't see any way this is possible.
Avatar of AlasdairMcL
AlasdairMcL

You may be able to use the Application Security Registration tool (appsec.exe) to allow the users access to only a pre-defined set of applications. This will ensure that Users can only access certain applications as pre-defined by an Administrator.

More information can be found here: http://www.microsoft.com/windows2000/techinfo/reskit/tools/hotfixes/appsec-o.asp

Al
how are these users allowed to logon... or is the station logged on all the time for their use...

can you throttle their abilities thru their logon name (hopefully they are not on as admins)????
Avatar of jmcnear

ASKER

they are logged in all the time, but not as admins, but rather a regular user.  I apply GPO at start up and logon time.

Is there a gpo option regarding usb drives?

ASKER CERTIFIED SOLUTION
Avatar of waffleironhead
waffleironhead

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial