Solved

DENY ACCESS TO USB/CDROM

Posted on 2012-03-12
8
664 Views
Last Modified: 2012-04-06
I have a standalone Windows XP system and would like to know how to prevent USB access and CDROM access for regular users while allowing full access from Administrator. Ideally, I would prefer to lock this machine using the OS as opposed to 3rd party software.

Thank you
0
Comment
Question by:bukufungi
  • 2
  • 2
  • 2
  • +1
8 Comments
 
LVL 12

Assisted Solution

by:Amick
Amick earned 250 total points
ID: 37711907
0
 
LVL 9

Assisted Solution

by:bill_lynch
bill_lynch earned 125 total points
ID: 37711913
Our Antivirus Software (Sophos) does this for us.  Check yours to see if they have it available.
0
 
LVL 12

Accepted Solution

by:
Amick earned 250 total points
ID: 37712003
A custom group policy administrative template that will probably fulfill your need is discussed here: http://support.microsoft.com/kb/555324
0
The Eight Noble Truths of Backup and Recovery

How can IT departments tackle the challenges of a Big Data world? This white paper provides a roadmap to success and helps companies ensure that all their data is safe and secure, no matter if it resides on-premise with physical or virtual machines or in the cloud.

 
LVL 11

Assisted Solution

by:Khandakar Ashfaqur Rahman
Khandakar Ashfaqur Rahman earned 125 total points
ID: 37712177
When your users have Administrative privileges then they can access it by changing ownership.

Better, you use CDROM/USB/Bluetooth locker software which would be password protected.Just search on google and find one which could meet your requirement.And you also need to restrict internet access/download.Otherwise users can download softwares even through email.
0
 
LVL 11

Expert Comment

by:Khandakar Ashfaqur Rahman
ID: 37712294
0
 

Author Comment

by:bukufungi
ID: 37717975
I tried the registry fix. From administrator login, I can enable/disable USB storage. However, I can plug in an external CD burner and it will still burn a CD. I tried Sophos which is a a product I am familiar with... unfortunately it requires a network with a server running the Enterprise console in order to lock a systems down using the device control feature.

I'll try the group policy and see if that does the trick.
0
 

Author Closing Comment

by:bukufungi
ID: 37816515
Combination of all suggestions has resolved our issue. Thank you
0

Featured Post

Flexible connectivity for any environment

The KE6900 series can extend and deploy computers with high definition displays across multiple stations in a variety of applications that suit any environment. Expand computer use to stations across multiple rooms with dynamic access.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Active Directory security has been a hot topic of late, and for good reason. With 90% of the world’s organization using this system to manage access to all parts of their IT infrastructure, knowing how to protect against threats and keep vulnerabil…
The Windows functions GetTickCount and timeGetTime retrieve the number of milliseconds since the system was started. However, the value is stored in a DWORD, which means that it wraps around to zero every 49.7 days. This article shows how to solve t…
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, just open a new email message. In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…

685 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question