Hi warriorfan,

What is it exactly you are trying to do? Just monitoring when a USB drive is connected won't necessarily help, as you don't know who did it. Also, what if the drive was already connected at bootup?

XP Pro detects when a drive was attached but I don't know if there is a log entry generated and certainly not if it identifies the device. From what I can see it automatically accepts anything that was attached before boot-up.

Another consideration is even if you can tell that a device was connected, how would you know what was done with it?

Perhaps a different approach would be to specify authorised devices which could be easily assigned to individuals. A nice feature would be if it would only let the authorised individual attach the device if they were logged in to that workstation?

You might like to look at this:

http://www.fileguru.com/UHook-USB-Disk-Security/info

Several USB security products there