Disabling access to USB port/CD burning

[ebthor]

I have a customer that wants to be able to block access to USB devices and burning CD's, but they only have 4 computers and no dedicated server, so most of the programs I have found are way out of their league. Does anyone have any suggestions to do this?

 

[wicked23]

what about a local policy in gpedit.msc? That's assuming you have xp pro.

 

[ebthor]

The only possible problem with this (other than the XP Pro issue, which they may or may not have) is that every user is logged on as a local admin, or some programs don't work properly. This means they could change the policy back, and I don't know anyway we could stop this.

Also, do you know where these policy settings are in gp?

 

[wicked23]

well if they don't need to read cd's...why not remove the devices all together.

And most user don't know what GP is let alone how to find it and edit it.

 

[ebthor]

We could do that through the BIOS but disabling USB ports, if possible, would mean that printers wouldn't work either.

 

[wicked23]

unless you hooked your printers up with another kind of connection.

 

[KSoD]

Well make the users Non Admins. Why do they need to be Admin to print? That way you can do a GPO edit and they could not reverse it. Best option.

 

[ebthor]

Do you know where in the GPO these settings are?

 

[KSoD]

Start>run>gpedit.msc

If they have XP Pro.

 

[wicked23]

I never actually did exactly that myself so your gonna have to do the research yourself. besides your the one getting paid right