Disable Booting from USB or CD When BIOS Doesn't Offer Option

Hi folks!

We have a large number of workstations in our organization that I have just discovered do not, apparently, have an option in the BIOS to disable booting from devices such as USB flash drives, floppy drives, or CD/DVD drives. You can take the devices out of the default boot order so that they are not tried automatically, but anyone can hit F11 to access the boot menu during start up and manually pick one, introducing several security risks.

The PC's in question are all Systemax PC's using the AMI BIOS v.2.061.

The users of these PC's absolutely must have the ability to use CD's and DVD's, as well as flash drives, in the computers, so simply removing or disabling the devices altogether is not an option.

Is there any way at all to prevent booting from devices other than the hard drive if the BIOS does not offer such an option?

Thanks!

- Ithizar
IthizarAsked:
Who is Participating?
 
Al JeeConnect With a Mentor Commented:
The boot process is handled by the BIOS before anything else is loaded.

If there are no options in your current BIOS for regulating the boot options for CD/DVD or floppy then the only real option is to contact the motherboard manufacturer about a "security version" of the BIOS that has the option(s) to turn off/on booting from various hardware.

It's doubtful that this version exists, but it appears to be your only option with this motherboard.


0
 
NyradelCommented:
Are you able to disable the startup prompt in the bios and password protect it?
0
 
ken2421Commented:
Set the hard drive in bios to first boot device and password the bios.

Ken
0
Get 10% Off Your First Squarespace Website

Ready to showcase your work, publish content or promote your business online? With Squarespace’s award-winning templates and 24/7 customer service, getting started is simple. Head to Squarespace.com and use offer code ‘EXPERTS’ to get 10% off your first purchase.

 
IthizarAuthor Commented:
Even with the hard drive set as the first boot device, the BIOS offers the option to press F11 during the startup process to access a boot menu, which then lets you choose any boot device you want. There is no option in the BIOS that I can find to disable the ability to access that boot menu.
0
 
harryhelpCommented:
Have you enabled any supervisor password available?
0
 
IthizarAuthor Commented:
The only password options are either an admin password, which only prevents you from entering the BIOS setup, or to require a password on all startups, even startups from the hard drive.
0
 
harryhelpCommented:
The only thing I can think of is speaking to Systemax, or looking for a BIOS update.
0
 
IthizarAuthor Commented:
I've tried updating to the latest version of the AMI BIOS and, unfortunately, it didn't add the option. I guess we can try contacting Systemax or MSI (the motherboard manufacturer). I was hoping maybe there was some option I wasn't thinking of.
0
 
jcimarronCommented:
Ithizar--From http://discussions.virtualdr.com/showthread.php?t=233730
"The option to disable booting from the USB device was present in the Bios, but it only appeared when the device itself was connected to the PC."
0
 
IthizarAuthor Commented:
That may apply to USB flash drives, but the floppy drive and CD-ROM drive are always present, and there is no option to prevent booting from them that I can find.
0
 
jcimarronCommented:
Ithizar--Well, at least I got one out of three. :)
0
 
IthizarAuthor Commented:
That's kinda what I feared. Thanks everyone for your help!
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.