RE: USB ports Network

["Nick Vaernhoej" <nick.vaernhoej () capitalcardservices com>]

Good afternoon,

To remove access to USB storage devices I think the easiest way is to
simply disallow access to %SystemRoot%\inf\usbstor.inf and
SystemRoot%\inf\usbstor.PNF in a group policy. Doing this will block
access to the files needed for the device to mount.

Nick Vaernhoej
"Quidquid latine dictum sit, altum sonatur."

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of Tornado
Sent: Wednesday, May 02, 2007 5:41 AM
To: security-basics () securityfocus com
Subject: USB ports Network

Hi All,

We got Windows 2003 AD domain with all the workstations/servers as
Windows
2000/XP/2003/Vista. As part of our security policy we do not keep the
USB
ports enabled and disable them from BIOS itself. But we want to make
sure
that there are no machines which have USB port left enabled by mistake.
 Is there any way/software whereby we can check/scan the ports remotely
on
the domain?

Thanks in advance.

----------------------------------------------------------------------
Get a free email address with REAL anti-spam protection.
http://www.bluebottle.com


This electronic transmission is intended for the addressee (s) named above. It contains information that is privileged, 
confidential, or otherwise protected from use and disclosure. If you are not the intended recipient you are hereby 
notified that any review, disclosure, copy, or dissemination of this transmission or the taking of any action in 
reliance on its contents, or other use is strictly prohibited. If you have received this transmission in error, please 
notify the sender that this message was received in error and then delete this message.
Thank you.