winmasterplan
Fri Jul 04 00:30:01 CDT 2008
Hi again,
I have applied this template long time ago. You have the obtion to disable
only mass storage devices, not all usb devices. Test it on an ou and see the
results. But it will not monitor anything.
Have a nice day!
"just fix it" wrote:
> In the section regarding disabling writing to usb mass storage devices I have
> read the link and it is my understanding that this .adm file would stop all
> UPB ports. Would that not shut down all the usb printers, mice, keyboards
> and monitor usb ports?
>
> "Masterplan" wrote:
>
> > Hi,
> >
> > You can disable writing to cds from group policy :
> > Administrative Template: System\ USER\ Windows Components\Windows Explorer
> > This will disable writing from Windows XP. If users have third party tools
> > installed, anyway admins must grant rights to users (from example from Nero
> > Burning Rights) to write files to cds.
> > To disable writing to usb mass storage devices, look here:
> >
http://support.microsoft.com/kb/555324
> >
> > Have a nice day!
> >
> > "just fix it" wrote:
> >
> > > Is there a way to block users from copying data from shared network drives to
> > > external drives or CD's? Would even settle for monitoring to log files to
> > > track those users that attempt to take data off site. Or both would be great.