There is a driver on the market that can selectively disable USB device
www.protect-me.com see DeviceLock®
-----Message d'origine-----
De : Laura A. Robinson [mailto:laurarobinson@verizon.net]
Envoyé : 9 décembre, 2004 22:23
À : 'Tim Watkins'; focus-ms@securityfocus.com
Objet : RE: Secondary Storage Device Policy
You can do it with XPSP2:
http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/sp2otech.mspx
#ECAA
Otherwise, in most cases, you're looking at a more global disabling of USB,
which is, of course, not what you're seeking.
Laura
-----Original Message-----
From: Tim Watkins [mailto:watkinstj@iimef.usmc.mil]
Sent: Thursday, December 09, 2004 1:01 PM
To: focus-ms@securityfocus.com
Subject: Secondary Storage Device Policy
I am currently developing a policy in a Microsoft environment
on the use of Secondary Storage Devices. This is especially
concerned with Thumb drives and ensuring that they do not
compromise security between classified systems. Do any of
you already have a policy in place? Additionally, is there a
simple way of removing the drivers from a WinXP or 2000
environment so that these types of devices can not be
installed via plug and play? I have played around with the
idea of shutting down USB ports but there are just too may
other things (mice, keyboards, cac readers) that use them.
If there was a way to know (event viewer perhaps) or other
means when one was attached, it would also help.
Tim Watkins
--------------------------------------------------------------
-------------
--------------------------------------------------------------
-------------
---------------------------------------------------------------------------
---------------------------------------------------------------------------
---------------------------------------------------------------------------
---------------------------------------------------------------------------
