Home > IT Answers > Microsoft Windows > Windows XP Policies..
Howeee
0 pts.
 Windows XP Policies..
Desktops, Management, Microsoft Windows, OS, Security, Servers, SQL Server
I have a problem with users copying files from their local workstation to a USB memory stick, floppys and at times burn CDs with company files. Is there any way I can deny access to these peripherals? Currently, the users are not administrators of their local machines and are just users.

Software/Hardware used:
ASKED: January 23, 2007  3:59 PM
UPDATED: January 24, 2007  1:41 PM
RELATED QUESTIONS
Answer Wiki:
There are some custom GPO settings (http://www.petri.co.il/disable_usb_disks_with_gpo.htm) that affect users with USB drives. As far as using other peripherals, there's nothing built into XP except to restrict users from viewing these devices via GPO or using a program like devicelock (http://www.devicelock.com/) or Sanctuary DeviceControl (http://www.securewave.com/usb_security.jsp). I've tested both products and both are rather easy to configure and administer.
Last Wiki Answer Submitted:  January 23, 2007  5:36 pm  by  Swiftd   0 pts.
All Answer Wiki Contributors:  Swiftd   0 pts.
To see all answers submitted to the Answer Wiki: View Answer History.


RSS - Discussions Help
Discuss This Question:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

 

you have to use the GFI Software and it is integrated with Active Directory and it is very good I have tested in the Bank and if you need more information you can send me msg on the following mail:jawishm@yahoo.fr

Jawish
 0 pts.
 

There is another new security product on the market. We are currently evaluating it and I am quite impressed. The product is ActiveSentry from the company NextSentry (www.nextsentry.com). I had a visit and a product demo from them and you can protect data movement on the network. It uses an advanced AI (artificial intelligence) engine to analyze what users are doing and can prevent actions or just report them to administrators for analysis. It goes way beyond just disabling peripheral device access if you need it to.

Newellar
 0 pts.
 

There is an article on this issue specifically here: http://www.windowsdevcenter.com/pub/a/windows/2005/11/15/disabling-usb-storage-with-group-policy.html

They go over some options but ultimately, recommend making a custom ADM file to use with Group Policy. It links to a Microsoft KB article listing exact code for the new ADM file.
That MS KB article is here: http://support.microsoft.com/default.aspx?scid=kb;en-us;555324

Good luck,
Dave VW

DVanderWoude
 0 pts.