Re: How to disable USB in 64 bit environment

[fire0088 () gmail com]

here are a few options I can think of (can't google, I'm on vacation):
1. Disable usb in bios, buy a usb to ps2 adapter for each computer's mouse. Approximately $2 per workstation. Some 
people may need another for their keyboards. 
2. Disable usb in the registry, then deny users access to the registry. Its been awhile since I've done it, but I 
believe its an option in group policy.

If users are altering security settings, notify management.

3. Goto home depot and buy a tube of silicone sealant and a caulk gun and fill each usb port. Silicone doesn't conduct 
electricity. Obviously, get approval.

I'm sure more options exist, but these should be a start.
------Original Message------
From: kartik.netsec () gmail com
Sender: listbounce () securityfocus com
To: security-basics () securityfocus com
Subject: How to disable USB in 64 bit environment
Sent: Sep 2, 2011 5:12 AM

Hi,

I am puzzled on how to control external drive usage in our environment (Win 7 64 bit). Please help me providing your 
opinions based on below scenario:

1. USB control does not work as SEP 11.0 does not support 64 bit OS for application and device control. (Needs 
migration to 12.1, but will take months)
2. Cannot disable USB via BIOS as users use USB mouse.
3. Tried disabling USB through registry, but it is not a permanent solution, as anyone can google on how to enable USB 
via registry.
4. Conducted user awareness traning many times but it doesn't seem to change users behaviour.

Thanks,
Kartik

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------



Sent via BlackBerry by AT&T