Solved

DENY ACCESS TO USB/CDROM

Posted on 2012-03-12
8
649 Views
Last Modified: 2012-04-06
I have a standalone Windows XP system and would like to know how to prevent USB access and CDROM access for regular users while allowing full access from Administrator. Ideally, I would prefer to lock this machine using the OS as opposed to 3rd party software.

Thank you
0
Comment
Question by:bukufungi
  • 2
  • 2
  • 2
  • +1
8 Comments
 
LVL 12

Assisted Solution

by:Amick
Amick earned 250 total points
ID: 37711907
0
 
LVL 9

Assisted Solution

by:bill_lynch
bill_lynch earned 125 total points
ID: 37711913
Our Antivirus Software (Sophos) does this for us.  Check yours to see if they have it available.
0
 
LVL 12

Accepted Solution

by:
Amick earned 250 total points
ID: 37712003
A custom group policy administrative template that will probably fulfill your need is discussed here: http://support.microsoft.com/kb/555324
0
Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

 
LVL 11

Assisted Solution

by:Khandakar Ashfaqur Rahman
Khandakar Ashfaqur Rahman earned 125 total points
ID: 37712177
When your users have Administrative privileges then they can access it by changing ownership.

Better, you use CDROM/USB/Bluetooth locker software which would be password protected.Just search on google and find one which could meet your requirement.And you also need to restrict internet access/download.Otherwise users can download softwares even through email.
0
 
LVL 11

Expert Comment

by:Khandakar Ashfaqur Rahman
ID: 37712294
0
 

Author Comment

by:bukufungi
ID: 37717975
I tried the registry fix. From administrator login, I can enable/disable USB storage. However, I can plug in an external CD burner and it will still burn a CD. I tried Sophos which is a a product I am familiar with... unfortunately it requires a network with a server running the Enterprise console in order to lock a systems down using the device control feature.

I'll try the group policy and see if that does the trick.
0
 

Author Closing Comment

by:bukufungi
ID: 37816515
Combination of all suggestions has resolved our issue. Thank you
0

Featured Post

Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

Join & Write a Comment

If you need to start windows update installation remotely or as a scheduled task you will find this very helpful.
Nothing in an HTTP request can be trusted, including HTTP headers and form data.  A form token is a tool that can be used to guard against request forgeries (CSRF).  This article shows an improved approach to form tokens, making it more difficult to…
As developers, we are not limited to the functions provided by the VBA language. In addition, we can call the functions that are part of the Windows operating system. These functions are part of the Windows API (Application Programming Interface). U…
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now