I have a standalone Windows XP system and would like to know how to prevent USB access and CDROM access for regular users while allowing full access from Administrator. Ideally, I would prefer to lock this machine using the OS as opposed to 3rd party software.

Thank you
Who is Participating?
AmickConnect With a Mentor Commented:
A custom group policy administrative template that will probably fulfill your need is discussed here:
bill_lynchConnect With a Mentor Commented:
Our Antivirus Software (Sophos) does this for us.  Check yours to see if they have it available.
Managing Security & Risk at the Speed of Business

Gartner Research VP, Neil McDonald & AlgoSec CTO, Prof. Avishai Wool, discuss the business-driven approach to automated security policy management, its benefits and how to align security policy management with business processes to address today's security challenges.

Khandakar Ashfaqur RahmanConnect With a Mentor Expert/ConsultantCommented:
When your users have Administrative privileges then they can access it by changing ownership.

Better, you use CDROM/USB/Bluetooth locker software which would be password protected.Just search on google and find one which could meet your requirement.And you also need to restrict internet access/download.Otherwise users can download softwares even through email.
Khandakar Ashfaqur RahmanExpert/ConsultantCommented:
bukufungiAuthor Commented:
I tried the registry fix. From administrator login, I can enable/disable USB storage. However, I can plug in an external CD burner and it will still burn a CD. I tried Sophos which is a a product I am familiar with... unfortunately it requires a network with a server running the Enterprise console in order to lock a systems down using the device control feature.

I'll try the group policy and see if that does the trick.
bukufungiAuthor Commented:
Combination of all suggestions has resolved our issue. Thank you
All Courses

From novice to tech pro — start learning today.