Shaun Wingrin
asked on
Blocking of USB Port
Say, kindly send link to software that block users from getting access to USB Ports. This software needs to run under XP and Windows7.
I have done an Internet search and found 1 or 2 options, but none of them are satisfactory.
I am looking for tried and tested software that will block a USB Port and restrict users from getting access to them.
I have done an Internet search and found 1 or 2 options, but none of them are satisfactory.
I am looking for tried and tested software that will block a USB Port and restrict users from getting access to them.
Have you see securityxploded.com/window s-usb-bloc ker.php ?
Alternatively, you could use GPEdit.msc, which is native to your OS, to disable USB Ports
1. Go to Run.
2. Type > gpedit.msc and press enter.
3. Under Computer Configuration > Policies > Administrative Templates > System > Removable Storage Access
Change the state to Enabled for for Removal Disks as below :
Removable Disks: Deny execute access Enabled
Removable Disks: Deny read access Enabled
Removable Disks: Deny write access Enabled
In the right pane, right click on Removable Disks: Deny read access and click on Properties.
1. Go to Run.
2. Type > gpedit.msc and press enter.
3. Under Computer Configuration > Policies > Administrative Templates > System > Removable Storage Access
Change the state to Enabled for for Removal Disks as below :
Removable Disks: Deny execute access Enabled
Removable Disks: Deny read access Enabled
Removable Disks: Deny write access Enabled
In the right pane, right click on Removable Disks: Deny read access and click on Properties.
If on a domain you can do this via Group Policy, similar to netchm his post above on local group policy
In addition if they have a managed antivirus solution from a reputable vendor, it is likely that the USB can be blocked that AV level too. No need for software. Software is too easy to bypass by users.
In addition if they have a managed antivirus solution from a reputable vendor, it is likely that the USB can be blocked that AV level too. No need for software. Software is too easy to bypass by users.
it is too costly to figure out, so i always recommend to use physical blocker
http://www.amazon.com/Lindy-USB-Port-Blocker-Green/dp/B000I2JWJ0
Overall, it will be cheaper to run this then implement a software
http://www.amazon.com/Lindy-USB-Port-Blocker-Green/dp/B000I2JWJ0
Overall, it will be cheaper to run this then implement a software
ASKER
Once more specification - it needs to have a password to unblock the USB ports please.
I don't think something like that is available. You can do this restriction if you're an admin on the box.
Use Regedit, navigate to the key HKEY_LOCAL_MACHINE\SYSTEM\ CurrentCon trolSet\Se rvices\USB STOR.
The value inside that key is Start. To disable USB storage, change Start’s data to 4. To enable it again, change the data to 3.
You could also just copy the below into a notepad:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM \CurrentCo ntrolSet\S ervices\US BSTOR]
”Start”=dword:00000004
[HKEY_LOCAL_MACHINE\SYSTEM \CurrentCo ntrolSet\S ervices\US BSTOR\Enum ]
”Count”=dword:00000000
”NextInstance”=dword:00000 000
save it as disableusb.reg. Make sure it’s saved as a REG file, not a TXT file.
Make another reg file with the same config as above with just one change :
”Start”=dword:00000004, and change the 4 to a 3.
Save the file as enableusb.reg
Use Regedit, navigate to the key HKEY_LOCAL_MACHINE\SYSTEM\
The value inside that key is Start. To disable USB storage, change Start’s data to 4. To enable it again, change the data to 3.
You could also just copy the below into a notepad:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM
”Start”=dword:00000004
[HKEY_LOCAL_MACHINE\SYSTEM
”Count”=dword:00000000
”NextInstance”=dword:00000
save it as disableusb.reg. Make sure it’s saved as a REG file, not a TXT file.
Make another reg file with the same config as above with just one change :
”Start”=dword:00000004, and change the 4 to a 3.
Save the file as enableusb.reg
ASKER
Will this work on XP?
Yes
ASKER
Anyone know if such software that can password protect the setting
Does not exist to my knowledge.
You could however see if you can turn off USB in BIOS, and PW protect BIOS,
You would need to use a PS2 mouse & keyboard if this is done.
You could however see if you can turn off USB in BIOS, and PW protect BIOS,
You would need to use a PS2 mouse & keyboard if this is done.
ASKER
I've previously used such software - anyone else aware of such software?
Googled and found this. Its very easy to bypass though software such as this. Would not recommend it for corporate or professional use. Maybe for home users. Have a peek and see if it suits.
USB Locker
USB Locker
ASKER
It doesn't use a password ....
It does. I just tested it out of interest... It even specifically states lock USB with password protection as a selling point :)
There are also 5 alternatives on that page near the end with more options for locking USB (I have not tested those however)
There are also 5 alternatives on that page near the end with more options for locking USB (I have not tested those however)
ASKER
Pls can you send the link to the one you tested - I may be downloading the incorrect version.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Excellent thankyou