How to Completely Restrict Floppy/CD-ROM Access using a Group Policy?

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Does anyone know how (via a Group Policy) to completely restrict a user's access to the Floppy Disk AND the CD-ROM drives? I know that You can use Group Policy/user configuration/administrative templates/windows components/Windows Explorer to hide and disable drives. Howeve
those settings only prohibit a user from using those drives while using Explorer, My Computer, Network Places, run box etc, BUT will NOT stop them from accessing the drive through the command prompt, or other methods including applications.

Short of going into the Device Manager on each and every local PC and disabling the device, OR purchasing an expensive 3rd Party Tool, is there anyway to automate this task via the registry or a Group policy
 
I don't know about through group policy, but you can in computer management.
You can go to removable storage and deny people or groups use of removable
storage or you can go to disk management in computer management and do it
that way.

--
Robert Cohen
A legend in his own mind
--

tatarnl said:
Does anyone know how (via a Group Policy) to completely restrict a user's
Click to expand...
access to the Floppy Disk AND the CD-ROM drives? I know that You can use
Group Policy/user configuration/administrative templates/windows
components/Windows Explorer to hide and disable drives. However
those settings only prohibit a user from using those drives while using
Click to expand...
Explorer, My Computer, Network Places, run box etc, BUT will NOT stop them
from accessing the drive through the command prompt, or other methods
including applications.
Short of going into the Device Manager on each and every local PC and
Click to expand...
disabling the device, OR purchasing an expensive 3rd Party Tool, is there
anyway to automate this task via the registry or a Group policy?
 
Yes, but that still means "touching" every PC's computer management settings. I don't want to do that....I want to automate it apply to all users except administrators. There has got to be a way to automate this process???? Does anyone know how to do this?
 
You might check out these two policies; also there is a website of a
possible solution




Administrative Templates\Windows Components\Windows Explorer





Hide these specified drives in My Computer


Administrative Templates\Windows Components\Microsoft Management
Console\Restricted/Permitted snap-ins\Extension snap-ins Logical and Mapped
Drives



http://www.devicelock.com/

--
Robert Cohen
A legend in his own mind
--

tatarnl said:
Yes, but that still means "touching" every PC's computer management
Click to expand...
settings. I don't want to do that....I want to automate it apply to all
users except administrators. There has got to be a way to automate this
process???? Does anyone know how to do this?
 
check out www.devicelock.com It's an inexpensive 3rd Party Tool.

tatarnl said:
Does anyone know how (via a Group Policy) to completely restrict a user's
Click to expand...
access to the Floppy Disk AND the CD-ROM drives? I know that You can use
Group Policy/user configuration/administrative templates/windows
components/Windows Explorer to hide and disable drives. However
those settings only prohibit a user from using those drives while using
Click to expand...
Explorer, My Computer, Network Places, run box etc, BUT will NOT stop them
from accessing the drive through the command prompt, or other methods
including applications.
Short of going into the Device Manager on each and every local PC and
Click to expand...
disabling the device, OR purchasing an expensive 3rd Party Tool, is there
anyway to automate this task via the registry or a Group policy?
 
Well, IMO $4500 for whole organization is a pretty reasonable price.

Did you test devicelock before purchasing it?

tatanl said:
Already found this and we are in the process of purchasing it. It's NOT
Click to expand...
inexpensive however. A license for your entire ogranization up to a certain
number of PCs is $4500.00. Thanks for the info.
 
Back
Top