Protecting USB ports

bremen1874 · 10 Mar 2009 at 15:41

We have a machine in a remote office and would like to control/stop the use of USB keys.

I'd like to just completely disable the USB ports but the local printer and a reader for digital tacho cards both connect via USB.

I also don't think I can get away with completely disabling USB storage as this would stop a digital camera working.

Does anyone know of a more granular approach? What I'd like to be able to do is block all USB storage devices unless they have been deliberately authorised for use.

The machine isn't connected to our Domain but could be if necessary.

Any thoughts appreciated.

Sin_Chase · 10 Mar 2009 at 15:49

DeviceLock will give you all the control you need.

It is not free however.

Rhys · 10 Mar 2009 at 15:51

MS Steady State will also do this and is free.

bremen1874 · 10 Mar 2009 at 16:06

Thanks for the suggestions, I'll look into them both.

The solution doesn't need to be free.

malef!c · 10 Mar 2009 at 17:08

I know the techie boys at work do it by messing with the registry - not sure if they do this from the domain controller (or whatever it is) that we log into.