Disable Data Transfer From USB

Attempting to disable Data transfer from any USB devices, without losing the USB functionality of USB Keyboard / Mouse Running Windows XP Pro.  I am aware Disabling though the BIOS.  We are running SEP 11 I'm pretty sure there is a way to configure SEP to block USB data transfer, not sure where it is.
ManieyaK_CSSPAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Steven HarrisPresidentCommented:
1) Log-in to the SEP Manager console.
2) Select Policies, then Application and Device Control under Policies.
3) Select the Application and Device Control policy to be modified in the right-hand pane.
4)  Under Tasks, click Edit the Policy.
5)  In the left pane, under Application and Device Control, click Device Control.
6)  In the Blocked Devices section, click Add
7)  In the Device Selection window select USB, click OK.  

USB should now be listed under Device Name in the Blocked Devices section.


To exclude the Mouse and Keyboard as blocked devices:  


1)  In the right pane of the Application and Device Control Policy window, select the Devices Excluded From Blocking section.  Click Add
2)  In the Device Selection menu, click Human Interface Devices (Mice, ... etc).  Click OK.  

Assign the modified Application and Device Control Policy to the appropriate Machine Groups.
0
Nick RhodeIT DirectorCommented:
You have a server in place or you want it do it on a local system?
0
ManieyaK_CSSPAuthor Commented:
This is on a non networked DSS computer that is running the Un Managed version on SEP 11
0
The IT Degree for Career Advancement

Earn your B.S. in Network Operations and Security and become a network and IT security expert. This WGU degree program curriculum was designed with tech-savvy, self-motivated students in mind – allowing you to use your technical expertise, to address real-world business problems.

ComputerTechieCommented:
0
McKnifeCommented:
http://www.trinit-soft.de/usb-waechter/ is a freeware that is meant for single computers. Does just what you want. To deploy settings network wide you would need to export the config of one configured computer to all others. This could be done with GPOs (export registry parts or .ini-files)-
0
ManieyaK_CSSPAuthor Commented:
McKnife this looks like it would be very useful however when i downloaded the package & installed, even though i translated the Web page into English all of the wording with the application were not in English.  I attached a screen shot of what i get.  Please advise if there is an English version for download.

Thanks.
USB-Watchert.png
0
ManieyaK_CSSPAuthor Commented:
CT,
This looks like it will be very useful as well for what i am looking to do, I will not be able to test until first of week
Thanks
0
ManieyaK_CSSPAuthor Commented:
Also I was wanting to know if there is a a way to disable Only USB data transfer devices. For instance if i wanted to plug in peripheral devices such a USB printer or USB mouse / keyboard & use them.  But restrict USB data devices from transfering / receiving data.
0
Rich RumbleSecurity SamuraiCommented:
ComputerTechie's comment   39545945 outlined (above)how windows allows you to prevent mass-storage devices, but sill allows you to charge and iphone or use mouse/kb's over USB.  http://support.microsoft.com/kb/823732
-rich
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
McKnifeCommented:
I am sorry, it looks as if there is no English version available. The setup and configuration are quite easy, you might manage to configure it without learning German, I would give it a try.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows XP

From novice to tech pro — start learning today.