RE: Controlling specific USB devices on Windows XP

["Steven Hay" <shay () communitysavings ca>]

Just curious, does anyone know if Vista is going to have any
intelligence for USB control built in either by registry key or
additional GPO? 

-----Original Message-----
From: Ken S [mailto:ken.securitylist () gmail com] 
Sent: June 13, 2006 3:06 PM
To: security-basics () securityfocus com; focus-ms () securityfocus com
Subject: Controlling specific USB devices on Windows XP

I am investigating the possibility of locking down Windows computers to
only allow specific USB devices to attach.  I'm considering the mtrust
product from www.m-systems.com, which the marketing materials say can
force users to only use their particular USB storage devices (or those
that they OEM to others, like Kingston, Verbatim, etc.).

Does anyone have experience with this package?  If so, what are the pros
and cons?

Also, are there other solutions are out there that can ensure only
specific USB storage devices are allowed on a system?

Is there anything specific for biometric USB storage?

Any comments on the effectiveness of such software?

Thanks,

Ken S

------------------------------------------------------------------------
---
------------------------------------------------------------------------
---