+ Post New Thread
Page 2 of 2 FirstFirst 12
Results 16 to 26 of 26
Windows Thread, Disable USB disks in Technical; Originally Posted by Ric_ Which is why I copy the file into their MyDocuments for them or a staff member ...
  1. #16
    ajbritton's Avatar
    Join Date
    Jul 2005
    Location
    Wandsworth
    Posts
    1,632
    Thank Post
    23
    Thanked 75 Times in 45 Posts
    Rep Power
    34

    Re: Disable USB disks

    Quote Originally Posted by Ric_
    Which is why I copy the file into their MyDocuments for them or a staff member drops it into the shared area where they can pick it up.
    I guess having Citrix leaves you with plenty of time on your hands

  2. #17

    Ric_'s Avatar
    Join Date
    Jun 2005
    Location
    London
    Posts
    7,590
    Thank Post
    109
    Thanked 762 Times in 593 Posts
    Rep Power
    180

    Re: Disable USB disks

    It's all that walking that I don't do

    I don't get a lot of people coming to have stuff copied. They generally email it in - like I tell them... it's more reliable. Still get the odd fool with a floppy disk that they have had in the bottom of their bag for 2 weeks... like it's going to work!

  3. #18

    Join Date
    Feb 2006
    Posts
    1,187
    Thank Post
    0
    Thanked 1 Time in 1 Post
    Rep Power
    0

    Re: Disable USB disks

    Ah ..BOFH we meet at last

  4. #19

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,241
    Thank Post
    239
    Thanked 1,567 Times in 1,249 Posts
    Rep Power
    339

    Re: Disable USB disks

    The solution I use (which has worked perfectly) is to modify the System.adm file by restricting the number of available drive letters. Very simple and works really well.

    Save a copy of the System.adm file to your desktop and rename it to SystemStaff.adm or SystemPupil.adm for example. Open the file using Notepad. Now click on Edit > Find and type drives. You're now at the right place!

    POLICY !!NoDrives
    #if version >= 4
    SUPPORTED !!SUPPORTED_Win2k
    #endif

    EXPLAIN !!NoDrives_Help
    PART !!NoDrivesDropdown DROPDOWNLIST NOSORT REQUIRED
    VALUENAME "NoDrives"
    ITEMLIST
    NAME !!ABOnly VALUE NUMERIC 3
    NAME !!COnly VALUE NUMERIC 4
    NAME !!DOnly VALUE NUMERIC 8
    NAME !!ABConly VALUE NUMERIC 7
    NAME !!ABCDOnly VALUE NUMERIC 15
    NAME !!ALLDrives VALUE NUMERIC 67108863 DEFAULT
    ; low 26 bits on (1 bit per drive)
    NAME !!RestNoDrives VALUE NUMERIC 0
    END ITEMLIST
    END PART
    END POLICY

    POLICY !!NoViewOnDrive
    #if version >= 4
    SUPPORTED !!SUPPORTED_Win2k
    #endif

    EXPLAIN !!NoViewOnDrive_Help
    PART !!NoDrivesDropdown DROPDOWNLIST NOSORT REQUIRED
    VALUENAME "NoViewOnDrive"
    ITEMLIST
    NAME !!ABOnly VALUE NUMERIC 3
    NAME !!COnly VALUE NUMERIC 4
    NAME !!DOnly VALUE NUMERIC 8
    NAME !!ABConly VALUE NUMERIC 7
    NAME !!ABCDOnly VALUE NUMERIC 15
    NAME !!ALLDrives VALUE NUMERIC 67108863 DEFAULT
    ; low 26 bits on (1 bit per drive)
    NAME !!RestNoDrives VALUE NUMERIC 0
    END ITEMLIST
    END PART
    END POLICY
    Under where it says "!!ALLDrives" under both sections enter:

    NAME !!PupilDrives VALUE NUMERIC 48

    My above example would block access to drive letters "E" and "F" as 16 + 32 = 48

    A 1
    B 2
    C 4
    D 8
    E 16
    F 32
    G 64
    H 128 etc etc

    Now click on Edit > Find and type Strings. You're now at the right place! Under ABOnly="Restrict A and B drives only" enter a new line PupilDrives="Pupils have no flash drives". Now save your file.

    Once you've uploaded your modified adm file, within Group Policy navigate to:

    User Config > Admin Templates > Windows Components > Windows Explorer

    Look for two policies called:

    "Hide these specified drives in My Computer" And "Prevent access to drives from My Computer".

    Enable both these policies and select your custom policy from the list. Logon to a workstation and test your modification

    The great thing about this solution is that it isn't a machine restriction, but a restriction based on user. So at my school, staff can happily use flash memory sticks on any computer, however if a child attempted to, Windows would do nothing!

  5. #20
    mark's Avatar
    Join Date
    Jun 2005
    Posts
    3,958
    Thank Post
    248
    Thanked 49 Times in 45 Posts
    Blog Entries
    2
    Rep Power
    46

    Re: Disable USB disks

    A new piece of s/w on this theme: http://www.intelliadmin.com/blog/200...-remotely.html

    Remote USB Dive Disabler

  6. #21
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    4,996
    Thank Post
    120
    Thanked 280 Times in 258 Posts
    Rep Power
    106

    Re: Disable USB disks

    I bet it just unregisters the usbstore.sys Still nice interface

  7. #22
    mark's Avatar
    Join Date
    Jun 2005
    Posts
    3,958
    Thank Post
    248
    Thanked 49 Times in 45 Posts
    Blog Entries
    2
    Rep Power
    46

    Re: Disable USB disks

    Correct!

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\UsbStor

    DWORD value name: Start

    Value data: 4 = USB storage devices are disabled

    Value data: 3 = USB storage devices are enabled

  8. #23
    eejit's Avatar
    Join Date
    Jun 2005
    Location
    Ireland
    Posts
    606
    Thank Post
    52
    Thanked 12 Times in 12 Posts
    Rep Power
    22

    Re: Disable USB disks

    Quote Originally Posted by mark
    Correct!

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\UsbStor

    DWORD value name: Start

    Value data: 4 = USB storage devices are disabled

    Value data: 3 = USB storage devices are enabled
    I've made a script to change that value to 4, but the buggers are still able to use the drives. How is that possible?

    (BTW, I have to checked the registry to make sure that the settings did get applied properly)


  9. #24

    mac_shinobi's Avatar
    Join Date
    Aug 2005
    Posts
    9,680
    Thank Post
    3,210
    Thanked 1,030 Times in 955 Posts
    Rep Power
    361

    Re: Disable USB disks

    disable usb in the bios ? But then you wont be able to use USB keyboard or mouse afaik, unless your bios's can stop just memory sticks ( Not sure if thats possible though, although it would be nice )

  10. #25

    Join Date
    Oct 2006
    Posts
    6
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: Disable USB disks

    Of course, disabling in bios is not the way to go. What about usb mice and keyboards?
    You can handle this with special protection tools. Another approach is to use a desktop management utility, for example Desktop Authority. As far as I know, this tool contains a usb security option for restricting the use of usb storage devices and and any communication devices.

  11. #26

    Join Date
    Feb 2007
    Location
    Roanoke, VA
    Posts
    6
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: Disable USB disks

    Quote Originally Posted by Anddy
    Of course, disabling in bios is not the way to go. What about usb mice and keyboards?
    You can handle this with special protection tools. Another approach is to use a desktop management utility, for example Desktop Authority. As far as I know, this tool contains a usb security option for restricting the use of usb storage devices and and any communication devices.
    Anddy,

    You are correct. The USB/Port Security option in Desktop Authority will do exactly what you are talking about.

    It installs a driver on the client machine that allows you to restrict access to different devices based on what we call Validation Logic. For example, you could allow your students to read from thumb drives without allowing write, etc. You can also distinguish between different types of devices and different types of access based on the user that logs in, for example.

    The page I linked to above will explain it in more detail. I hope this helps.

    Jack Doyle, Systems Engineer
    ScriptLogic Corporation
    http://www.scriptlogic.com

SHARE:
+ Post New Thread
Page 2 of 2 FirstFirst 12

Similar Threads

  1. Old 5ΒΌ-inch disks
    By daveyboy in forum General Chat
    Replies: 5
    Last Post: 6th August 2007, 01:35 PM
  2. Floppy disks
    By localzuk in forum General Chat
    Replies: 20
    Last Post: 20th July 2007, 11:20 PM
  3. Bookmaster : LCP resource disks
    By contink in forum Educational Software
    Replies: 1
    Last Post: 22nd January 2007, 03:59 PM
  4. Basic or Dynamic disks
    By Kyle in forum How do you do....it?
    Replies: 3
    Last Post: 24th September 2006, 11:12 PM
  5. Moving 4 RAID 5 disks
    By Dos_Box in forum Hardware
    Replies: 10
    Last Post: 28th September 2005, 11:02 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •