how make access is denid for flash usb

[RYU81]

is there way to make my winxp show any flad usb insert show access is denied like this:

Edited February 11, 2009 by RYU81

[iamtheky]

Maybe not exactly the same, but this is how i disallow them. 3 files the .reg the .adm and the batch to run them and deny the users group the right to the usbstor files.

usbstore.reg

---------------------------------------------------------------------------------

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR]

"Start"=dword:00000004

----------------------------------------------------------------------------------

usbstore.adm

----------------------------------------------------------------------------------

CLASS MACHINE

CATEGORY USB STORAGE

POLICY USB STORAGE DEVICES

KEYNAME "SYSTEM\CurrentControlSet\Services\USBSTOR"

EXPLAIN This policy allows the disabling of USB storage devices

PART "Startup Type" DROPDOWNLIST REQUIRED

VALUENAME "Start"

ITEMLIST

NAME "Disabled" VALUE NUMERIC 4

END ITEMLIST

END PART

END POLICY

END CATEGORY

-----------------------------------------------------------------------------------

usbblock.bat

------------------------------------------------------------------------------------

@echo off

Echo.

Echo Fixing Universal Serial Bus

Echo.

.\usbstore.reg

Echo.

Echo Applying Policy

Echo.

copy usbstore.adm c:\windows\sytem32\group policy\

Echo.

Echo Applying Security

Echo.

CACLS C:\windows\inf\usbstor.inf /D "users"

CACLS C:\windows\inf\usbstor.pnf /D "users"

-----------------------------------------------------------------------------------------------------

[RYU81]

ok if that to make it but how allow it?if see pc is already disable.

Edited February 11, 2009 by RYU81