Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 690
  • Last Modified:

xp pro/home security

is there some way to disable a cd or usb? except for admin accts?
disable the cd or usb from program auto run?
for non admin accts, only allow predefined program list for execution, similar to only allowing a list of trusted websites?
0
bbxrider1
Asked:
bbxrider1
  • 4
  • 3
  • 2
  • +1
1 Solution
 
houssam_balloutCommented:
go to start>run>gpedit.msc

under computer configuration >windows settings> MSecurity settings> Local policies> Security Options> you can restrict the CDROM

or you can download a third-party application to make your job easy:
use PC Security

www.tropsoft.com/pcsecurity/
0
 
bbxrider1Author Commented:
the tropsoft products have more total functionality than gpedit? or same with just a better/easieruser interface? for instance something like 1 click to implement zoned out dangerous website lists
0
 
houssam_balloutCommented:
well, almost thirdparty software  had simple interface
0
The Firewall Audit Checklist

Preparing for a firewall audit today is almost impossible.
AlgoSec, together with some of the largest global organizations and auditors, has created a checklist to follow when preparing for your firewall audit. Simplify risk mitigation while staying compliant all of the time!

 
bbxrider1Author Commented:
ok forget about the interface, the main question again,
does the tropsoft recommended security application provide more security functionality than what is already present in gpedit and other windows security features such as 'windows firewall'
0
 
houssam_balloutCommented:
you can give it a try, iy may or maynt fit your needs
0
 
bbxrider1Author Commented:
thanks but no thanks, may or may not is not really the advice i expect from experts
0
 
houssam_balloutCommented:
well, it depend on your needs,
what are you trying to achieve?
how many users are there?
Do you have workgroup or domain?
0
 
bbaoIT ConsultantCommented:
here is the MS official solution for this: Windows SteadyState

Windows SteadyState
http://www.microsoft.com/windows/products/winfamily/sharedaccess/default.mspx

Download Windows SteadyState 2.5
http://www.microsoft.com/downloads/details.aspx?FamilyID=d077a52d-93e9-4b02-bd95-9d770ccdb431&displaylang=en

hope it helps,
bbao
0
 
bbaoIT ConsultantCommented:
after loading SteadyState, at Configuring Computer Restrictions | Security Settings | Prevent write access to USB storage devices, you can do that.

for more specific information:

Windows SteadyState 2.5 Handbook
http://download.microsoft.com/download/d/2/6/d261b347-2f03-4bcf-8240-8b7a66beef8a/Windows%20SteadyState%20Handbook.pdf

hope it helps,
bbao
0
 
bbxriderCommented:
the shared state document didn't really supply any new ideas for what has been tried concerning this and another related post. it is fine with me to close this thread
0

Featured Post

[Webinar On Demand] Database Backup and Recovery

Does your company store data on premises, off site, in the cloud, or a combination of these? If you answered “yes”, you need a data backup recovery plan that fits each and every platform. Watch now as as Percona teaches us how to build agile data backup recovery plan.

  • 4
  • 3
  • 2
  • +1
Tackle projects and never again get stuck behind a technical roadblock.
Join Now