Results 1 to 5 of 5

Thread: Group policy or free software for locking USB

  1. #1
    Junior Member
    Join Date
    Jun 2004

    Group policy or free software for locking USB

    I have a question, I want to either disable USB sockets via group policy or stop people plugging in usb memory sticks, bit security never hurt but not sure how to do it via group policy, some people use usb keyboards and mice so may be an issue there, and i have heard that GFI do some software that locks this down, but costs loads, anyone know of some free software or a way around this, thanks in advance

  2. #2
    Super Moderator Super Moderator Big Booger's Avatar
    Join Date
    Apr 2002
    Generally any tool you employ using software can be defeated with a simple use of any Live Linux Cd.

    So I would:

    * disable boot from CD (if I can boot from CD I can boot into alternative OS
    and bypass security settings)

    Instead of trying to block it, why not send out a memo with a new policy concerning those devices and then simple tell them that you will be monitoring USB port usage at random:

    That is a free tool to monitor the use. But I would first give the users the opportunity to do the correct thing via a memo.

    If you really want a software solution:

    Not free above.


    Devicewall seems do tod what you want to a T... but again not free.

    And this company:

    offers different price plans depending on need.

    Or for a registry hack:

    USB ports on desktop computers pose a security risk in many environments. This is because simply by inserting a USB flash drive or key into these ports, users can download sensitive files from their computers and transport them off site, possibly in contravention of your corporate security policy.

    In Windows XP SP2 you can prevent this by making a registry tweak that makes any USB devices that are plugged into your machine read-only so users can't tranfser files to them. To do this, go to HKLM\System\CurrentControlSet\Control and create a new key named StorageDevicePolicies. Then within this key created a REG_DWORD value named WriteProtect and set it equal to 1.

    If desired you could create a .reg file for this tweak and distribute it using a logon script, or you could create a custom ADM template for Group Policy that includes this new setting.
    The windows shared Computing Toolkit also may allow you to limit USB access:

  3. #3
    Junior Member
    Join Date
    Jun 2004

    many thanks

    thats opened up a few more options for me, many thanks for the help, will give them all a go i think. and let you know the results. thanks again.

  4. #4
    Junior Member
    Join Date
    Mar 2007
    Why not disable your USB port from tour BIOS

  5. #5
    Old and Cranky Super Moderator rik's Avatar
    Join Date
    Aug 2003
    Watching Your every move...
    Not all BIOS have that feature available.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts