Security Basics mailing list archives

Re: USB ports Network


From: phillip <phillip () cryptolife org>
Date: Wed, 2 May 2007 20:21:35 +0200

On Wednesday 02 May 2007 12:40:37 Tornado wrote:
Hi All,

We got Windows 2003 AD domain with all the workstations/servers as Windows
2000/XP/2003/Vista. As part of our security policy we do not keep the USB
ports enabled and disable them from BIOS itself. But we want to make sure
that there are no machines which have USB port left enabled by mistake.
 Is there any way/software whereby we can check/scan the ports remotely on
the domain?

Thanks in advance.


Hi tornado,

why you don't use the windows group policy to disable the storage devices on 
your machines ?

here's an example:
http://www.windowsdevcenter.com/pub/a/windows/2005/11/15/disabling-usb-storage-with-group-policy.html

Regards.

Phillip


Current thread: