Hi again,
I have applied this template long time ago. You have the obtion to disable
only mass storage devices, not all usb devices. Test it on an ou and see the
results. But it will not monitor anything.
Have a nice day!
"just fix it" wrote:
<span style="color:blue">
> In the section regarding disabling writing to usb mass storage devices I have
> read the link and it is my understanding that this .adm file would stop all
> UPB ports. Would that not shut down all the usb printers, mice, keyboards
> and monitor usb ports?
>
> "Masterplan" wrote:
> <span style="color:green">
> > Hi,
> >
> > You can disable writing to cds from group policy :
> > Administrative Template: System USER Windows ComponentsWindows Explorer
> > This will disable writing from Windows XP. If users have third party tools
> > installed, anyway admins must grant rights to users (from example from Nero
> > Burning Rights) to write files to cds.
> > To disable writing to usb mass storage devices, look here:
> >
http://support.microsoft.com/kb/555324
> >
> > Have a nice day!
> >
> > "just fix it" wrote:
> > <span style="color:darkred">
> > > Is there a way to block users from copying data from shared network drives to
> > > external drives or CD's? Would even settle for monitoring to log files to
> > > track those users that attempt to take data off site. Or both would be great.</span></span></span>