Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1260
  • Last Modified:

Windows 7 - Disable USB Drives

Looking for a free (or low-cost) solution for blocking user access to usb-drives in Windows 7 and XP environment.

From what I've read, with Group Policy, it the GPO only works on blocking access to those USB Drives whose drivers have already been loaded in the computer. So after the GPO's applied, if I plug in a new USB flash drive into the system, it will load the driver and USB Flash drive will be accessible.

Not sure if there's a good solution for this, and if there is, can you apply it to only specific users? Wouldn't want to prevent an admin from logging on a system under their account and running necessary repair tools from a USB Flash drive (assuming network drives are inaccessible).
0
garryshape
Asked:
garryshape
  • 2
3 Solutions
 
Thomas Zucker-ScharffSystems AnalystCommented:
USB-Set is free but will disable for the computer, not by user.
0
 
garryshapeAuthor Commented:
Thanks for the suggestion. It looks like that has to be installed on the systems though. What's your experience with it?
0
 
Thomas Zucker-ScharffSystems AnalystCommented:
Yes it does need to be installed.  I have installed it on our machines and it has worked very well.  I set it to silently innoculate all USB devices and network devices that are attached to the computer.  I also set the switches to disable autorun.  It simply writes a folder called autorun.inf with a file in the folder that has the hidden and read only bits set.  Just doing this has cut down infections from USB sticks to 0 on computers that are used in areas like conference rooms.

The setup takes very little time per computer, I usually do it when I've been asked to do something else on the computer that requires me to be physically there.
0
 
SaadAhmedFarooquiCommented:
You can disable USB storage device from group policy. You will need to extend the group policy by importing an administrative template, then the setting to disable usb storage devices will be aavailable just like other settings.

The settings ar available form microsoft from the following link:

http://support.microsoft.com/kb/555324
0

Featured Post

Get your Disaster Recovery as a Service basics

Disaster Recovery as a Service is one go-to solution that revolutionizes DR planning. Implementing DRaaS could be an efficient process, easily accessible to non-DR experts. Learn about monitoring, testing, executing failovers and failbacks to ensure a "healthy" DR environment.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now