Disable USB Drive through GP

[ngcw]

I have 4 PC which I want to prevent user from using their USB thumb drive.
But the administrator have the access to use the thumb drive. How can it be
done by using group policy? Please advise.

Regards,
Ngcw

[Florian Frommherz]

Howdy!

A pretty tricky thing. If you search on google with these newsgroups as
a filter, you will find many hits...

Anyway, I've got two sites for you that might be of interest:

http://www.jsifaq.com/SF/Tips/Tip.aspx?id=7093
http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/sp2otech.mspx#ECJAC

But keep in mind, that people have multiple options to bring data from
outside into your network or take them out of the office
(HTTP/FTP/Mail/CDs/over the PDA..., Flashcards...)

cheers,

Florian
--
Nachwuschsadmin aus dem Süddeutschen/Germany.
eMail: Vorname [bei] frickelsoft [Punkt] net.

[Jack Doyle]

Desktop Authority 7.5
(http://www.scriptlogic.com/products/desktopauthority/) from
ScriptLogic gives you the ability (through the USB/Port Security
Option:
http://www.scriptlogic.com/products/desktopauthority/usbsecurity.asp)
to control access to those resources that you are referring to.

You can give read/write permission to different users/groups based on
Desktop Authority's Validation Logic.

>From the ScriptLogic website: The USB and Port Security option provides
policy-based lockdown of USB, storage and communication devices. It
provides multiple levels of security allowing complete access or denial
to certain device types, such as MP3 players, while allowing more
granular levels of security, such as Read Only access to a CD-R drive.

There is a complete list of supported deviecs on the page linked above.

There is a free evaluation available. Good luck.

Jack Doyle, Systems Engineer
ScriptLogic Corporation
www.scriptlogic.com