+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 26
Windows Thread, Disable USB disks in Technical; I just found this article on the excellent Daniel Petri website. I've not tried it, but it looks a lot ...
  1. #1
    ajbritton's Avatar
    Join Date
    Jul 2005
    Location
    Wandsworth
    Posts
    1,632
    Thank Post
    23
    Thanked 75 Times in 45 Posts
    Rep Power
    34

    Disable USB disks

    I just found this article on the excellent Daniel Petri website. I've not tried it, but it looks a lot simpler than some solutions I've seen.

  2. #2

    Gatt's Avatar
    Join Date
    Jan 2006
    Posts
    6,671
    Thank Post
    860
    Thanked 650 Times in 431 Posts
    Rep Power
    499

    Re: Disable USB disks

    nice, pity our school is letting kids use pen drives - much to my disdain

  3. #3
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    5,011
    Thank Post
    120
    Thanked 282 Times in 260 Posts
    Rep Power
    108

    Re: Disable USB disks

    Thats how you can stop everyone from using USB disks but unfortunately its per machine. I restrict drives for students as they are always drive d: it's easy for me to do.

  4. #4

    Join Date
    Feb 2006
    Posts
    1,187
    Thank Post
    0
    Thanked 1 Time in 1 Post
    Rep Power
    0

    Re: Disable USB disks

    Why do you need to ban USB drives?

    So long as you have AV, WSUS,SRP and LUA then there shouldn't really be a problem with executable content.
    Locking the BIOS will also help some, despite Geoff's handy cracking tips.
    (They have to be able to run the executable first )

  5. #5

    Ric_'s Avatar
    Join Date
    Jun 2005
    Location
    London
    Posts
    7,596
    Thank Post
    109
    Thanked 764 Times in 595 Posts
    Rep Power
    181

    Re: Disable USB disks

    @NetworkGeezer: Why do you need to allow their use? There are many means of electronic data transfer that negates their use and are far more reliable.

    Surely, the hassle of setting up policies, etc. can be avoided by just not using them.

  6. #6
    tosca925's Avatar
    Join Date
    Aug 2005
    Location
    Midlands
    Posts
    1,547
    Thank Post
    4
    Thanked 4 Times in 4 Posts
    Rep Power
    22

    Re: Disable USB disks

    We let our kids use them as well.

  7. #7

    Gatt's Avatar
    Join Date
    Jan 2006
    Posts
    6,671
    Thank Post
    860
    Thanked 650 Times in 431 Posts
    Rep Power
    499

    Re: Disable USB disks

    they become a haven for kids to bring all sorts in with them - games, viruses, shortcuts etc.

    I've used GPO to restrict the running of exe's from the pen drives as best i can, but the buggers still get round it.

    Would rather vito them completely

    Looking at removing all removable drives from the PC's over summer (ie floppy's and CD/DVD drives, etc)

  8. #8
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    5,011
    Thank Post
    120
    Thanked 282 Times in 260 Posts
    Rep Power
    108

    Re: Disable USB disks

    We have that setup and it works ok for us. They can email stuff in if needed or if they cant they can bring it to me to sort on a disc.

  9. #9

    Gatt's Avatar
    Join Date
    Jan 2006
    Posts
    6,671
    Thank Post
    860
    Thanked 650 Times in 431 Posts
    Rep Power
    499

    Re: Disable USB disks

    That's how I wanna go, but TPTB are over-ruling me on it

  10. #10

    Join Date
    Feb 2006
    Posts
    1,187
    Thank Post
    0
    Thanked 1 Time in 1 Post
    Rep Power
    0

    Re: Disable USB disks

    Then they have a valid reason for being on Hotmail during lesson time.

  11. #11


    Join Date
    Dec 2005
    Location
    In the server room, with the lead pipe.
    Posts
    4,648
    Thank Post
    275
    Thanked 780 Times in 607 Posts
    Rep Power
    224

    Re: Disable USB disks

    We don't allow USB drives used by the kids, for the reasons mentioned and it's far too easy to get up to stuff using one. Kids bring anything they need to via sneakernet (and we stick it on) or email it in. We don't have floppy drives or cd-roms for the same reason.

    We alter permissions on usbstor.inf on the virgin ghost. Works fine for us (yes there are ways around it, but the bar is sufficiently high to make it easier to bring the stick to us).

    You can also set up a group policy to encrypt the data on all removable media.

  12. #12

    Join Date
    Feb 2006
    Posts
    1,187
    Thank Post
    0
    Thanked 1 Time in 1 Post
    Rep Power
    0

    Re: Disable USB disks

    Quote Originally Posted by Gatt
    I've used GPO to restrict the running of exe's from the pen drives as best i can, but the buggers still get round it.
    How?

    If you have path based white-list software restriction policies and all students are restricted users then there should be very little they could do.

    It might take a while but locking the box down is the best policy so you're not caught on the hop. Not every one has broadband at home and the time to wait while the 25MB Publisher file is upload to their Hotmail account.

    I hope I am not living under a false sense of security.

  13. #13

    Gatt's Avatar
    Join Date
    Jan 2006
    Posts
    6,671
    Thank Post
    860
    Thanked 650 Times in 431 Posts
    Rep Power
    499

    Re: Disable USB disks

    They renamed the file IIRC - hadn't locked it down properly in SRP

  14. #14
    ajbritton's Avatar
    Join Date
    Jul 2005
    Location
    Wandsworth
    Posts
    1,632
    Thank Post
    23
    Thanked 75 Times in 45 Posts
    Rep Power
    34

    Re: Disable USB disks

    Quote Originally Posted by Ric_
    @NetworkGeezer: Why do you need to allow their use? There are many means of electronic data transfer that negates their use and are far more reliable.
    The only good reasons I can currently think of are where students are working on projects which are too large to move around by email e.g. digital video

  15. #15

    Ric_'s Avatar
    Join Date
    Jun 2005
    Location
    London
    Posts
    7,596
    Thank Post
    109
    Thanked 764 Times in 595 Posts
    Rep Power
    181

    Re: Disable USB disks

    Quote Originally Posted by ajbritton
    Quote Originally Posted by Ric_
    @NetworkGeezer: Why do you need to allow their use? There are many means of electronic data transfer that negates their use and are far more reliable.
    The only good reasons I can currently think of are where students are working on projects which are too large to move around by email e.g. digital video
    Which is why I copy the file into their MyDocuments for them or a staff member drops it into the shared area where they can pick it up.

    FYI I have also blocked access to webmail for kids so that they must email to their school email account which can be monitored more closely. This is mainly for anti-bullying and the like but helps solve this problem.

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Old 5¼-inch disks
    By daveyboy in forum General Chat
    Replies: 5
    Last Post: 6th August 2007, 01:35 PM
  2. Floppy disks
    By localzuk in forum General Chat
    Replies: 20
    Last Post: 20th July 2007, 11:20 PM
  3. Bookmaster : LCP resource disks
    By contink in forum Educational Software
    Replies: 1
    Last Post: 22nd January 2007, 03:59 PM
  4. Basic or Dynamic disks
    By Kyle in forum How do you do....it?
    Replies: 3
    Last Post: 24th September 2006, 11:12 PM
  5. Moving 4 RAID 5 disks
    By Dos_Box in forum Hardware
    Replies: 10
    Last Post: 28th September 2005, 11:02 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •