May 2nd, 2007 11:31 AM
USB ports on Network
We got Windows 2003 AD domain with all the workstations/servers as Windows 2000/XP/2003/Vista. As part of our security policy we do not keep the USB ports enabled and disable them from BIOS itself. But we want to make sure that there are no machines which have USB port left enabled by mistake.
Is there any way/software whereby we can check/scan the ports remotely on the domain?
Thanks in advance.
May 2nd, 2007 02:43 PM
well, what we have done here is disabled all drive letters for most users except their home area (H), group area and for some users D and E. This means that CD drives, the C drive and all USB drives are inaccessible to most users except admin and the privileged few. Unfortunately since we did this through the ranger software I can't recall the exact way to do it through AD, I know it can be done however.
If the world doesn't stop annoying me I will name my kids ";DROP DATABASE;" and get revenge.
May 2nd, 2007 03:59 PM
I dont really like using policies because they are way too easy to get around. I know Nihil knows of some software that blocks the use of usb ports in windows though...
By instronics in forum The Security Tutorials Forum
Last Post: January 8th, 2010, 11:30 PM
By Tiger Shark in forum Firewall & Honeypot Discussions
Last Post: December 1st, 2004, 11:15 PM
By Computernerd22 in forum Network Security Discussions
Last Post: July 18th, 2003, 04:36 PM
By Noble Hamlet in forum AntiOnline's General Chit Chat
Last Post: March 17th, 2002, 08:38 AM
By Remote_Access_ in forum Security Archives
Last Post: January 2nd, 2002, 03:50 PM