Posted on 2012-03-12
Last Modified: 2012-04-06
I have a standalone Windows XP system and would like to know how to prevent USB access and CDROM access for regular users while allowing full access from Administrator. Ideally, I would prefer to lock this machine using the OS as opposed to 3rd party software.

Thank you
Question by:bukufungi
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
  • 2
  • +1
LVL 12

Assisted Solution

Amick earned 250 total points
ID: 37711907

Assisted Solution

bill_lynch earned 125 total points
ID: 37711913
Our Antivirus Software (Sophos) does this for us.  Check yours to see if they have it available.
LVL 12

Accepted Solution

Amick earned 250 total points
ID: 37712003
A custom group policy administrative template that will probably fulfill your need is discussed here:
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

LVL 11

Assisted Solution

by:Khandakar Ashfaqur Rahman
Khandakar Ashfaqur Rahman earned 125 total points
ID: 37712177
When your users have Administrative privileges then they can access it by changing ownership.

Better, you use CDROM/USB/Bluetooth locker software which would be password protected.Just search on google and find one which could meet your requirement.And you also need to restrict internet access/download.Otherwise users can download softwares even through email.
LVL 11

Expert Comment

by:Khandakar Ashfaqur Rahman
ID: 37712294

Author Comment

ID: 37717975
I tried the registry fix. From administrator login, I can enable/disable USB storage. However, I can plug in an external CD burner and it will still burn a CD. I tried Sophos which is a a product I am familiar with... unfortunately it requires a network with a server running the Enterprise console in order to lock a systems down using the device control feature.

I'll try the group policy and see if that does the trick.

Author Closing Comment

ID: 37816515
Combination of all suggestions has resolved our issue. Thank you

Featured Post

[Live Webinar] The Cloud Skills Gap

As Cloud technologies come of age, business leaders grapple with the impact it has on their team's skills and the gap associated with the use of a cloud platform.

Join experts from 451 Research and Concerto Cloud Services on July 27th where we will examine fact and fiction.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
The recent Petya-like ransomware attack served a big blow to hundreds of banks, corporations and government offices The Acronis blog takes a closer look at this damaging worm to see what’s behind it – and offers up tips on how you can safeguard your…
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…
In this video, viewers are given an introduction to using the Windows 10 Snipping Tool, how to quickly locate it when it's needed and also how make it always available with a single click of a mouse button, by pinning it to the Desktop Task Bar. Int…

615 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question