Posted on 2012-03-12
Last Modified: 2012-04-06
I have a standalone Windows XP system and would like to know how to prevent USB access and CDROM access for regular users while allowing full access from Administrator. Ideally, I would prefer to lock this machine using the OS as opposed to 3rd party software.

Thank you
Question by:bukufungi
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
  • 2
  • +1
LVL 12

Assisted Solution

Amick earned 250 total points
ID: 37711907

Assisted Solution

bill_lynch earned 125 total points
ID: 37711913
Our Antivirus Software (Sophos) does this for us.  Check yours to see if they have it available.
LVL 12

Accepted Solution

Amick earned 250 total points
ID: 37712003
A custom group policy administrative template that will probably fulfill your need is discussed here:
Webinar: Aligning, Automating, Winning

Join Dan Russo, Senior Manager of Operations Intelligence, for an in-depth discussion on how Dealertrack, leading provider of integrated digital solutions for the automotive industry, transformed their DevOps processes to increase collaboration and move with greater velocity.

LVL 11

Assisted Solution

by:Khandakar Ashfaqur Rahman
Khandakar Ashfaqur Rahman earned 125 total points
ID: 37712177
When your users have Administrative privileges then they can access it by changing ownership.

Better, you use CDROM/USB/Bluetooth locker software which would be password protected.Just search on google and find one which could meet your requirement.And you also need to restrict internet access/download.Otherwise users can download softwares even through email.
LVL 11

Expert Comment

by:Khandakar Ashfaqur Rahman
ID: 37712294

Author Comment

ID: 37717975
I tried the registry fix. From administrator login, I can enable/disable USB storage. However, I can plug in an external CD burner and it will still burn a CD. I tried Sophos which is a a product I am familiar with... unfortunately it requires a network with a server running the Enterprise console in order to lock a systems down using the device control feature.

I'll try the group policy and see if that does the trick.

Author Closing Comment

ID: 37816515
Combination of all suggestions has resolved our issue. Thank you

Featured Post

Connect further...control easier

With the ATEN CE624, you can now enjoy a high-quality visual experience powered by HDBaseT technology and the convenience of a single Cat6 cable to transmit uncompressed video with zero latency and multi-streaming for dual-view applications where remote access is required.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
SCOM - Service Restart 1 30
Windows 2008 SBS Patch 2 49
Where to download free Microsoft ISO's 4 31
Batch Renaming of Files 4 12
This article demonstrates probably the easiest way to configure domain-wide tier isolation within Active Directory. If you do not know tier isolation read…
Configuring Remote Assistance for use with SCCM
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question