Re: XP SP2 - new way to stop USB key drives

From: Henry Craven (IUnknown_at_Dot.Nyet)
Date: 09/14/04 

Date: Tue, 14 Sep 2004 16:54:06 +1000

You can restrict the Drives the user can see/access:

The user is then unable to access the device.

Using Group Policy Objects to hide specified drives in My Computer for
Windows 2000
http://support.microsoft.com/default.aspx?scid=kb;en-us;231289 

-- 
Henry Craven {SBS-MVP}
    Melbourne Australia
"Dave Stoecker" <david_stoecker@hotCOFFEEmail.com> wrote in message
news:e98onAbmEHA.3988@tk2msftngp13.phx.gbl...
> Interesting!
> I recall seeing a blog or discussion board post with code to create
policy
> templates for disabling usb sticks, as well as floppy, and cd-roms.
I'll
> post a link if I can find it again...
>
> DS
>
> "jann" <jann@dial.pipex.com> wrote in message
> news:enKfF9VmEHA.3336@TK2MSFTNGP10.phx.gbl...
> > Hi - not tried this, but looked handy
>
> ----------------------------------------------------------------------
----
> --
> > ----------------------------------------------
> > Controlling block storage devices on USB buses
> >
> > What does controlling block storage devices on USB buses do?
> >
> > This feature provides the ability to set a registry key that will
prevent
> > write operations to USB block storage devices, such as memory
sticks. When
> > this registry key is enabled, the devices function only as read-only
> > devices. You can implement this setting as part of a security
strategy to
> > prevent users from transporting data using these devices.
> >
> > Who does this feature apply to?
> >
> > . Users who do not want data to be written from their computer to a
USB
> > storage device.
> >
> >
> > . IT professionals who want to implement organization controls over
the
> use
> > of USB block storage devices
> >
> >
> > What settings are added or changed in Windows XP Service Pack 2
> >
> > Setting name Location Default value Possible values
> >
> > WriteProtect
> >
> > HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control
\StorageDevicePolicies
> >
> > DWORD=0
> >
> > 0 - Disabled
> >
> > 1 - Enabled
> >
> >
> >
>
>

Relevant Pages

  • Re: How to restrict file access to Domain Computers Only
    ... XP SP2 where you can disable write access to USB devices which can be ... What does controlling block storage devices on USB buses do? ... This feature provides the ability to set a registry key that will prevent ...
    (microsoft.public.windows.server.security)
  • Re: USB removable disks
    ... If the computers in question are XP Pro there is a registry setting you can ... enable to disable write ability to USB drives that can be deployed via Group ... What does controlling block storage devices on USB buses do? ...
    (microsoft.public.windows.server.security)
  • Re: XP SP2 - new way to stop USB key drives
    ... I recall seeing a blog or discussion board post with code to create policy ... templates for disabling usb sticks, as well as floppy, and cd-roms. ... > What does controlling block storage devices on USB buses do? ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: XP SP2 - new way to stop USB key drives
    ... I spoke at an IT Managers conference in Kansas City ... I had my powerpoint presentation on a USB disk key, ... >> What does controlling block storage devices on USB buses do? ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: XP SP2 - new way to stop USB key drives
    ... I had my powerpoint presentation on a USB disk key, ... >>>> What does controlling block storage devices on USB buses do? ... >>>> this registry key is enabled, the devices function only as read-only ...
    (microsoft.public.backoffice.smallbiz2000)