Forbid access to usb drives

[alcium]

Hello

I don't know if this is the right place to post but here we go

I need to forbid access to USB Drives, iPods and other external storage devices on some computer, I found a tweak some times ago by setting registry start to 0x04 for USBSTOR class

It worked for a time, but users found that unplug the USB mouse and replace it with the storage seems to work

I would of course need a free solution for it to work (or not work more precisely )

I couldn't find a post talking about it on MSFN so I'm sorry if this is a re-re-repost of already talked subject

[nitroshift]

Ummmm.... Disable the USB ports and use PS/2 mice

[alcium]

easy way

but I need USB for Wacom tablets to get to work ...

and sometimes firewire to plug camcorders but for that I can manage manually to activate and disable firewire in the bios.

[N1K]

We use this DeviceLock

Are you using Active Directory?

[alcium]

Using active directory

I know about device lock but it is not free at all

[N1K]

Using active directory

I know about device lock but it is not free at all

LoL, haven't saw that line We just bought today a 1000 licences, really not too much expensive

[Ctrl-X]

AFAIK Windows Vista will include functionality to achieve this. Don't think it is possible in earlier Windows versions without a third-party product.

[chilifrei64]

I have used this at a few places

http://lazynetworkadmin.com/content/view/27/6/

[alcium]

This is good chilifrei

I used this settings but I applied it in a different way,

I think yours is far better so I consider this as a good answer