We help IT Professionals succeed at work.

Block USB Drives

WellingtonIS
WellingtonIS asked
on
379 Views
Last Modified: 2012-05-08
I'm looking for a wa,y software, GPO,  anything to block access to a USB mass storage device to any and all PC's in our network unless we approve them and they are password protected. We use XP on all of our desktops and server 2003 for our DC;s

Does anyone know of a way to do this or any software that may accomplish this?
Comment
Watch Question

Commented:
See if either of these is what you are looking for:
http://support.microsoft.com/kb/823732
http://support.microsoft.com/kb/555324

Author

Commented:
That's only part of it.  I need to be able to allow those devices that we in IT approve.  With the registry its all or nothing and with a GPO is by user name or pc name.  I need to be able to distinguish by the device.
Top Expert 2013

Commented:
WellingtonIS--Perhaps of help
http://www.technize.com/2009/03/14/block-the-usb-port-in-windows-networks/
http://service1.symantec.com/support/ent-security.nsf/docid/2009031809381448

Author

Commented:
We don't use endpoint. I'm looking at the software suggestion.

Author

Commented:
Does anyone know of software that will allow me to block by device instead of user or computer?  The problem is I want to all certain USB devices that come from IT if I create a registry entry or a GPO then that restricts either uses or computers but not the actual device.  For example If I have a USB storage device for IT purposes, then I want to be able to use that device on any PC in the domain.  If I create a GPO then I can't.
This one is on us!
(Get your first solution completely free - no credit card required)
UNLOCK SOLUTION

Author

Commented:
Thanks!  I'm going to look into this.
Brian BEE Topic Advisor, Independent Technology Professional
CERTIFIED EXPERT

Commented:
Apparently this is a duplicate question. The admins say the other post is going to be deleted and I won't get the points over there.  Here is my answer from the other post:

GPO can stop USB devices, but the "unless we approve them" part isn't really possible in that context. However, after applying the policy, I guess you could remotely edit the user's registry and temporarily enable the setting again.

http://www.petri.co.il/forums/showthread.php?t=3299
http://www.mydigitallife.info/2008/06/26/disable-usb-removable-mass-storage-device-drive-access-in-windows/
http://www.intelliadmin.com/index.php/2006/04/disable-usb-drives/

Author

Commented:
This did what we needed thanks.

Commented:
how many computers you are looking at protecting / or how many computers are there in your environment.

1. what are the kind of usb device that you use. list all

2. what are the usb devices you want to block. list all.


Author

Commented:
There are about 1200 in the domain.  I'm want to disallow all USB Devices unless we (IT) give them out.  I think we are going to use Lexar 4 gig devices.

Commented:
how about keyboards mouse and headphone printers etc?

Commented:
also are you looking at some end point security solutions?

Author

Commented:
Keyboards, mice, printers need access.  Endpoint would be fantastic however we use CA.

Commented:
is ca not able to address to your need?

give me a mac address of any one machine , VID & PID key of USB Keyboards, mice, printers need access and any one of usb drive that you would like to work

Commented:
hey did u find a solution?

Gain unlimited access to on-demand training courses with an Experts Exchange subscription.

Get Access
Why Experts Exchange?

Experts Exchange always has the answer, or at the least points me in the correct direction! It is like having another employee that is extremely experienced.

Jim Murphy
Programmer at Smart IT Solutions

When asked, what has been your best career decision?

Deciding to stick with EE.

Mohamed Asif
Technical Department Head

Being involved with EE helped me to grow personally and professionally.

Carl Webster
CTP, Sr Infrastructure Consultant
Empower Your Career
Did You Know?

We've partnered with two important charities to provide clean water and computer science education to those who need it most. READ MORE

Ask ANY Question

Connect with Certified Experts to gain insight and support on specific technology challenges including:

  • Troubleshooting
  • Research
  • Professional Opinions
Unlock the solution to this question.
Join our community and discover your potential

Experts Exchange is the only place where you can interact directly with leading experts in the technology field. Become a member today and access the collective knowledge of thousands of technology experts.

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.