[Dshield] Disable USB storage devices?

Eric Peters epeters at pcthome.com
Wed Oct 13 15:41:00 GMT 2004


A non admin account will be able to use the drive.

What I do 

1) if the BIOS supports it turn off all USB ports and password the BIOS

2) JB Weld the slots and wait for it to dry. You will permanently harm
the computer if you go this route.

Cheers,
Eric

On Wed, 2004-10-13 at 09:07 -0400, Shane Presley wrote:
> Hello,
> 
> A colleague recently asked me if it was possible to disable a system
> (Windows 2000 & XP) from using USB storage devices?  For example, we
> want a system to be able to use USB printers, scanners, etc.  But we
> don't want a user to be able to plug in a memory stick or zip drive.
> 
> Any thoughts?  Would non-administrator accounts be good enough to
> block this?  What about for admin accounts, any third party software
> that can block it?
> 
> Thanks,
> Shane
> _______________________________________________
> DShield and the Internet Storm Center are sponsored by the SANS Institute.
> To learn more about current SANS training, see http://www.sans.org .
> 
> _______________________________________________
> send all posts to list at lists.dshield.org
> To change your subscription options (or unsubscribe), see: http://www.dshield.org/mailman/listinfo/list



More information about the list mailing list