Re: USB ports Network

["Tornado" <itsec_guy () bluebottle com>]

Thanks all for your inputs. We will certainly create the policy for the USB 
storage devices as given below.

Thanks once again.

----- Original Message ----- 
From: "phillip" <phillip () cryptolife org>
To: <security-basics () securityfocus com>
Sent: Wednesday, May 02, 2007 11:51 PM
Subject: Re: USB ports Network


> On Wednesday 02 May 2007 12:40:37 Tornado wrote:
> > Hi All,
> >
> > We got Windows 2003 AD domain with all the workstations/servers as 
> > Windows
> > 2000/XP/2003/Vista. As part of our security policy we do not keep the USB
> > ports enabled and disable them from BIOS itself. But we want to make sure
> > that there are no machines which have USB port left enabled by mistake.
> >  Is there any way/software whereby we can check/scan the ports remotely 
> > on
> > the domain?
> >
> > Thanks in advance.
>
> Hi tornado,
>
> why you don't use the windows group policy to disable the storage devices 
> on
> your machines ?
>
> here's an example:
> http://www.windowsdevcenter.com/pub/a/windows/2005/11/15/disabling-usb-storage-with-group-policy.html
>
> Regards.
>
> Phillip

----------------------------------------------------------------------
Get a free email account with anti spam protection.
http://www.bluebottle.com