OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Disabling USB mass storage

From: Weber Ress (weber_resshotmail.com)
Date: Fri Mar 04 2005 - 12:08:57 CST


Hi,

The GPO works with an Apple IPod ??

Thank's

Weber Ress

Steven Hay wrote:
> Removable drives, yes.
>
> If we can do it by GPO then we're hoping we can decide what systems/users
> can be allowed to use removable storage devices (like camera's, USB drives,
> etc). Ideally we'd like to have it so a few manager's systems are allowed,
> as well as IT staff.
>
> -----Original Message-----
> From: Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
> [mailto:sbradcpapacbell.net]
> Sent: March 3, 2005 10:14 PM
> To: Steven Hay
> Cc: 'focus-mssecurityfocus.com'
> Subject: Re: Disabling USB mass storage
>
>
> HOW TO: Disable the Use of USB Storage Devices in Windows XP:
> http://support.microsoft.com/default.aspx?scid=kb;en-us;823732
>
> Disable completely?
>
> Steven Hay wrote:
>
>
>>Good topic question, one we're having issues with as well, but with XP
>>SP1.
>>
>>We want to disable any removable drives from working on our 400+
>>workstations without having to visit each one.
>>
>>I tried denying access to usbstor.sys in the GPO, and confirmed that
>>the policy was applied to our test system. But it seems like the
>>system privliges override the GPO rights (I'm guessing) as the
>>removable drive letter pops up and is usable when a USB drive is
>>connected.
>>
>>Anyone have any experience with locking these down using GPO?
>>
>>Steve
>>
>>-----Original Message-----
>>From: Moser, Scott [mailto:scott.mosersmead.com]
>>Sent: March 3, 2005 12:40 PM
>>To: Martin a Marika TYDOROVCI; focus-mssecurityfocus.com
>>Subject: RE: Disabling USB mass storage
>>
>>
>>Create new key
>>HKLM\System\CurrentControlSet\Control\StorageDevicePolicies
>>and then create REG_DWORD called WriteProtect and set to 1. This will
>>prevent write only (not read) in XP SP2 only.
>>
>>-----Original Message-----
>>From: Martin a Marika TYDOROVCI [mailto:tydyszm.sk]
>>Sent: Wednesday, March 02, 2005 2:10 PM
>>To: focus-mssecurityfocus.com
>>Subject: Disabling USB mass storage
>>
>>Hi list,
>>
>>Does anyone knows a way to disable USB mass storage device in Win XP? I
>>need to disable using devices such as USB flash drive, card readers,
>>etc.
>>
>>Regards
>>
>>-----------------------------------------------------------------------
>>-
>>---
>>------------------------------------------------------------------------
>>---
>>
>>
>>
>>-----------------------------------------------------------------------
>>----
>>---------------------------------------------------------------------------
>>Please note that Internet email is not always private, secure or reliable.
>>The sender accepts no liability for any damages caused by any virus
>>inadvertently transmitted with this email. Any opinion expressed in this
>>email is solely that of the author, unless clearly indicated otherwise.
>>This email, and any attachments, may contain confidential and/or
>
> proprietary
>
>>information that is intended only for use by the addressee. If you are not
>>the intended recipient, any use, dissemination, forwarding, printing, or
>>copying of this email is strictly prohibited. If you received this email
>
> in
>
>>error, please delete the email and advise the sender of the delivery error.
>>
>>-----------------------------------------------------------------------
>>----
>>---------------------------------------------------------------------------
>>
>>
>>
>>
>
>

---------------------------------------------------------------------------
---------------------------------------------------------------------------