Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

We would like to prevent USB access to machines (primarily Windows XP, 2003 machines) so that it would not be possible for employees to copy anything from the disk to a pen drive.

share|improve this question

6 Answers 6

up vote 5 down vote accepted

You can do this using Group Policy Preferences.

See here for more info.

share|improve this answer
    
it works, thanks –  user42891 Jul 29 '10 at 12:50

At my current job, we use Lumension Endpoint Security (http://www.lumension.com/). It is annoying as hell, which is exactly what it is supposed to do, so yes, it works well.

share|improve this answer

You can disable USB ports in Device Manager, but it will affect administrators as well.

share|improve this answer
    
thats fine with us –  user42891 May 12 '10 at 9:22

I would have said disabling USB ports too, but bear in tmind if your mouse/keyboard/webcam are usb this will disable them too.

share|improve this answer
    
i don't want my other devices to get affected with this, thanks for the hint –  user42891 May 21 '10 at 13:31

I used devicelock in the past, it does the job but it was a bit tricky to setup and maintein

http://www.devicelock.com/dl/

share|improve this answer

Microsoft provides an Administrative template to restrict USB drives on 2003/XP machines. To make the administrative template available in Group Policy Management, you will need to paste the administrative template text into a "RestrictDrives.adm" file, save it, and follow the instructions under the links in the "More Information" section.

http://support.microsoft.com/kb/555324

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.