USB Protection in windows 2000

  • Thread starter Thread starter Victor Pereira
  • Start date Start date
V

Victor Pereira

Hi,

I wanna know if does anybody here has a "solution" to block USB access (Mass
Storages) in a windows 2000 enviroment ? Not using 3rd part softwares and
JUST windows 2000 (I know Windows 2003 and XP can do it using GPO).

Is Remove usbd.sys permission an option ? I tried here and did'nt work.
Maybe Disabling "Plug and Play" ? (I tried too and a lot of things had
stopped to work).. so i don't know.. any ideas ?

Thanks in advance,

Victor Pereira
 
A solution:

Assing Deny permissions to the following files:
%SystemRoot%\Inf\Usbstor.pnf
%SystemRoot%\Inf\Usbstor.inf

And if the storage is already installed you must change the Start value to 4
in the following registry key:
HKLM\System\CurrentControlSet\Services\UsbStor

Does exist any other thing that i can do ?

Thanks,

Victor
 
You also may want to look into disable USB in cmos and password protecting
the cmos settings for the computer which while not foolproof is another
barrier to using USB. I personally have not found the Usbstor solution to
be reliable for all devices. --- Steve
 
Back
Top