USB Protection in windows 2000

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

Hi,

I wanna know if does anybody here has a "solution" to block USB access (Mass
Storages) in a windows 2000 enviroment ? Not using 3rd part softwares and
JUST windows 2000 (I know Windows 2003 and XP can do it using GPO).

Is Remove usbd.sys permission an option ? I tried here and did'nt work.
Maybe Disabling "Plug and Play" ? (I tried too and a lot of things had
stopped to work).. so i don't know.. any ideas ?

Thanks in advance,

Victor Pereira

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

A solution:

Assing Deny permissions to the following files:
%SystemRoot%\Inf\Usbstor.pnf
%SystemRoot%\Inf\Usbstor.inf

And if the storage is already installed you must change the Start value to 4
in the following registry key:
HKLM\System\CurrentControlSet\Services\UsbStor

Does exist any other thing that i can do ?

Thanks,

Victor

"Victor Pereira" <taintmode@yahoo.com.br> wrote in message
news:OifG$HbRFHA.3076@tk2msftngp13.phx.gbl...
> Hi,
>
> I wanna know if does anybody here has a "solution" to block USB access
(Mass
> Storages) in a windows 2000 enviroment ? Not using 3rd part softwares and
> JUST windows 2000 (I know Windows 2003 and XP can do it using GPO).
>
> Is Remove usbd.sys permission an option ? I tried here and did'nt work.
> Maybe Disabling "Plug and Play" ? (I tried too and a lot of things had
> stopped to work).. so i don't know.. any ideas ?
>
> Thanks in advance,
>
> Victor Pereira
>
>

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

You also may want to look into disable USB in cmos and password protecting
the cmos settings for the computer which while not foolproof is another
barrier to using USB. I personally have not found the Usbstor solution to
be reliable for all devices. --- Steve


"Victor Pereira" <taintmode@yahoo.com.br> wrote in message
news:%23UwbjRbRFHA.1436@TK2MSFTNGP10.phx.gbl...
>A solution:
>
> Assing Deny permissions to the following files:
> %SystemRoot%\Inf\Usbstor.pnf
> %SystemRoot%\Inf\Usbstor.inf
>
> And if the storage is already installed you must change the Start value to
> 4
> in the following registry key:
> HKLM\System\CurrentControlSet\Services\UsbStor
>
> Does exist any other thing that i can do ?
>
> Thanks,
>
> Victor
>
> "Victor Pereira" <taintmode@yahoo.com.br> wrote in message
> news:OifG$HbRFHA.3076@tk2msftngp13.phx.gbl...
>> Hi,
>>
>> I wanna know if does anybody here has a "solution" to block USB access
> (Mass
>> Storages) in a windows 2000 enviroment ? Not using 3rd part softwares and
>> JUST windows 2000 (I know Windows 2003 and XP can do it using GPO).
>>
>> Is Remove usbd.sys permission an option ? I tried here and did'nt work.
>> Maybe Disabling "Plug and Play" ? (I tried too and a lot of things had
>> stopped to work).. so i don't know.. any ideas ?
>>
>> Thanks in advance,
>>
>> Victor Pereira
>>
>>
>
>