Real Geek Forums

Real Geek Forums (http://www.realgeek.com/forums/index.php)
-   Windows XP Security & Administration (http://www.realgeek.com/forums/windows-xp-security-and-administration-33/)
-   -   Control User access Devices (http://www.realgeek.com/forums/control-user-access-devices-399768.html)

Graham 01-24-2004 01:57 AM

Control User access Devices
 
Hi guys,

I REALLY need your help.....

I have a number of PC's all with Windows XP Pro, which
are part of a Windows 2000 Server Domain.

I would like to know how to control user access to
CDRoms, Floppies and USB Ports, e.g. I want to dictate
which users from the domain can and cannot use the CDroms
or Floppies OR USB ports on each of the Windows XP
Machines.

Preferablly I would like to know how to do this using XP
or 2000 Server, or via FREEWARE 3rd party software. Our
company is a charity and as with most charities money is
VERY tight.

Thanks In advance

Graham

Carl 01-24-2004 07:48 AM

Control User access Devices
 
The last option on this page/link has info on where to
restrict users from the ability to install from removable
media. This pertains to 2003 svr, but I believe it's the
same in this instance for 2000 svr.

I don't know if it goes so far as to restrict all use of
removable media, but it should at least restrict progam
installs.

http://www.microsoft.com/technet/treeview/default.asp?
url=/technet/prodtechnol/windowsserver2003/proddocs/entserv
er/sag_WinInstall_Group_Policy_Users.asp

Quote:

>-----Original Message-----
>Hi guys,
>
>I REALLY need your help.....
>
>I have a number of PC's all with Windows XP Pro, which
>are part of a Windows 2000 Server Domain.
>
>I would like to know how to control user access to
>CDRoms, Floppies and USB Ports, e.g. I want to dictate
>which users from the domain can and cannot use the CDroms
>or Floppies OR USB ports on each of the Windows XP
>Machines.
>
>Preferablly I would like to know how to do this using XP
>or 2000 Server, or via FREEWARE 3rd party software. Our
>company is a charity and as with most charities money is
>VERY tight.
>
>Thanks In advance
>
>Graham
>.
>

Torgeir Bakken (MVP) 01-25-2004 12:50 AM

Re: Control User access Devices
 
Graham wrote:
Quote:

> Hi guys,
>
> I REALLY need your help.....
>
> I have a number of PC's all with Windows XP Pro, which
> are part of a Windows 2000 Server Domain.
>
> I would like to know how to control user access to
> CDRoms, Floppies and USB Ports, e.g. I want to dictate
> which users from the domain can and cannot use the CDroms
> or Floppies OR USB ports on each of the Windows XP
> Machines.
Hi

For the USB part, take a look here:

http://groups.google.com/groups?selm...tngp13.phx.gbl

http://groups.google.com/groups?selm...ngxa06.phx.gbl


To block specified drive letters (will work for floppy and CD-ROM drives
if they are all located at the same drive letters):

Prevent Access to the Contents of Selected Drives
http://www.winguides.com/registry/display.php/1157/

It is the same as this Group Policy setting:

Prevent access to drives from My Computer
(User Configuration\Administrative Templates\Windows Components\Windows
Explorer)

GPO reference:
http://msdn.microsoft.com/library/en-us/gp/340.asp


You should combine it with this one if you want to hide the drives as well:

Hide Drives in My Computer
http://www.winguides.com/registry/display.php/148/

GPO reference:
http://msdn.microsoft.com/library/en-us/gp/239.asp


I have not found any Group Policy setting that disables floppy or CD-ROM
specifically (only one that can disable them from remote access).




--
torgeir
Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of the 1328 page
Scripting Guide: http://www.microsoft.com/technet/scriptcenter




All times are GMT. The time now is 12:17 PM.

Powered by vBulletin® Version 3.7.1
Copyright ©2000 - 2019, Jelsoft Enterprises Ltd.
Copyright 2005 - 2007 RealGeek.com. All rights reserved.