Re: USB Drives
From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 02/01/05
- Next message: Roger Abell: "Re: Local policy per group"
- Previous message: Steven L Umbach: "Re: Local policy per group"
- In reply to: Michael LaFayette: "USB Drives"
- Messages sorted by: [ date ] [ thread ]
Date: Mon, 31 Jan 2005 21:54:47 -0600
First off you need to try and prevent these users from being Local
Administrators or else you will have a very difficult time - particularly
for Windows 2000. In Windows 2000 you can use Group Policy user
configuration/administrative templates/system and there are two settings for
"allow only" and " do not allow" Windows applications. If the user can
rename an executable they will be able to bypass restrictions in the " do
not allow" list though I still would at least add install.exe and setup.exe.
The " allow only" will probably work but can be difficult to populate the
list with all allowed executables as many programs rely on secondary
programs to run, though a utility like the free filemon from SysInternals
can help track those down. If you have XP Pro you can easily restrict users
with Software Restriction Policies - even local administrators with path,
hash, and certificate rules. The links below may help. --- Steve
http://support.microsoft.com/default.aspx?scid=kb;en-us;323525
http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/rstrplcy.mspx
-- Software Restriction Policies.
"Michael LaFayette" <Michael LaFayette@discussions.microsoft.com> wrote in
message news:CB58D4EF-AC15-4678-8619-DF467AFC54B4@microsoft.com...
>I would like to create a policy that allows access to data on USB drives,
>but
> does not allow programs to be run from them. We are a school, and the
> Administration wants the students to be able to use USB drives for
> storage,
> but I need to restrict software. They have found that they can install
> apps
> to the USB drives at home, then bring them to school and run them.
- Next message: Roger Abell: "Re: Local policy per group"
- Previous message: Steven L Umbach: "Re: Local policy per group"
- In reply to: Michael LaFayette: "USB Drives"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
