Z
ZeMotard
Good morning, I would like to limite the use of usb key.
What can I do with a GPO under win 2000 ?
Thanks
What can I do with a GPO under win 2000 ?
Thanks
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an alternative browser.
You should upgrade or use an alternative browser.
C
Cary Shultz [A.D. MVP]
ZeMotard,
There was a similar question about two or three weeks ago. AFAIK, there is
no GPO setting for this. This is a function of the computer BIOS.
HTH,
Cary
There was a similar question about two or three weeks ago. AFAIK, there is
no GPO setting for this. This is a function of the computer BIOS.
HTH,
Cary
Z
ZeMotard
Thanks, that means there is no action possible to do this on a w2k domain ?
B
Brent Mills
If you can find a registry setting that will limit this then it's possible
to write your own .adm template. It's not in any of the default templates.
to write your own .adm template. It's not in any of the default templates.
A
Ace Fekay [MVP]
In
Here's a snippet of a conversation I had with a fellow Microsoft Trainer
about this.....I forget who it was, unfortunately. I hope they don't mind I
repost this info.
(I believe it was and credit should go to Tatjana Aggousi, MCT)
====================================
.....
This leaded to more investigation and additions i want to share:
If USB capability won´t be disabled through the BIOS, maybe a company with
thousands of clients should also do categorical investigation on pocket
device- and SW policies, as well as in a good AV strategy.
Also a search on the WEB leaded to
SecureNT http://www.securewave.com/products/securent/
and devcon.exe
http://support.microsoft.com/default.aspx?scid=kb;EN-US;Q311272 with which a
..cmd start-up script can be build with the commands:
devcon remove @usb\*
devcon disable *USB
and disable/remove all or some (complex to know) USB devices. Without
driver.cab but with group restrictions policies for the administrators
group.
Maybe devcon needs a reboot; or it won´t run if the desktop already has
attached a USB keyboard (critical device), which i haven´t to test with.
=============================================
--
Regards,
Ace
Please direct all replies to the newsgroup so all can benefit.
This posting is provided "AS IS" with no warranties.
Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory
ZeMotard said:Good morning, I would like to limite the use of usb key.
What can I do with a GPO under win 2000 ?
Thanks
Here's a snippet of a conversation I had with a fellow Microsoft Trainer
about this.....I forget who it was, unfortunately. I hope they don't mind I
repost this info.
(I believe it was and credit should go to Tatjana Aggousi, MCT)
====================================
.....
This leaded to more investigation and additions i want to share:
If USB capability won´t be disabled through the BIOS, maybe a company with
thousands of clients should also do categorical investigation on pocket
device- and SW policies, as well as in a good AV strategy.
Also a search on the WEB leaded to
SecureNT http://www.securewave.com/products/securent/
and devcon.exe
http://support.microsoft.com/default.aspx?scid=kb;EN-US;Q311272 with which a
..cmd start-up script can be build with the commands:
devcon remove @usb\*
devcon disable *USB
and disable/remove all or some (complex to know) USB devices. Without
driver.cab but with group restrictions policies for the administrators
group.
Maybe devcon needs a reboot; or it won´t run if the desktop already has
attached a USB keyboard (critical device), which i haven´t to test with.
=============================================
--
Regards,
Ace
Please direct all replies to the newsgroup so all can benefit.
This posting is provided "AS IS" with no warranties.
Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory