Solved

Executble acess on a blocked machine

Posted on 2013-05-23
3
201 Views
Last Modified: 2013-06-01
Hi ,

i need to block on a windows 7 machine all usb & media devices ,
and creat an exeption for a specific executable to run from a DiskOnKey device.
is there any way using GPO on this scenario ?
or any other way of getting the job done from the OS.


Thanks,
0
Comment
Question by:yeroslav
3 Comments
 
LVL 78

Expert Comment

by:David Johnson, CD, MVP
Comment Utility
blocking is done at the device level. perhaps if you have the pci_env value for the device you may be able to allow it. The problem is that the DISKONKEY device is simply a USB drive and if you allow read/execution from a USB drive then ANY software on a Diskonkey drive will work. Can you not run this software from the network?
0
 
LVL 61

Accepted Solution

by:
btan earned 500 total points
Comment Utility
Possibly block specific vendor and product id and can check out this article belwo using usbdeview to surface more specific device info to help blocking or allowing. On top of that I was also thinking of applocker to allow execution of specific exe either through publisher or signature hash. ..

http://www.irongeek.com/i.php?page=security/plug-and-prey-malicious-usb-devices
0
 

Author Closing Comment

by:yeroslav
Comment Utility
Thanks.
0

Featured Post

Why You Should Analyze Threat Actor TTPs

After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

Join & Write a Comment

Suggested Solutions

SHARE your personal details only on a NEED to basis. Take CHARGE and SECURE your IDENTITY. How do I then PROTECT myself and stay in charge of my own Personal details (and) - MY own WAY...
This is about my first experience with programming Arduino.
An introduction to basic programming syntax in Java by creating a simple program. Viewers can follow the tutorial as they create their first class in Java. Definitions and explanations about each element are given to help prepare viewers for future …
Viewers will learn how to properly install Eclipse with the necessary JDK, and will take a look at an introductory Java program. Download Eclipse installation zip file: Extract files from zip file: Download and install JDK 8: Open Eclipse and …

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now