Software to prevent people using USB memory sticks

i know nothing · 10 Sep 2006 at 00:45

Is there any software that I can use to prevent people using USB memory sticks on a machine running windows XP?

The machine uses a USB printer and mouse so I can't physically disable the USB sockets (i.e. unplug them from the motherboard), I'm hoping that some smart cookie can suggest a way that I can prevent unauthorised use of a USB memory stick.

Any ideas?

Freedom · 10 Sep 2006 at 03:09

5 seconds in goodle

http://www.softek.co.uk/prod/sl/default.asp

Energize · 10 Sep 2006 at 03:32

Lmao talk about paranoia.

"Just imagine. You have a new office temp. She has been recruited by a rival firm to steal your client list. Simply by plugging her USB memory stick (or her iPod) into a PC she can copy all of your data unnoticed in seconds.

At the same time she decides to introduce a worm onto the network which causes no end of havoc. And to think, to accomplish all of this she did not even need to have any Administrator rights."

Guess they never realised you can just stop people copying, moving and executing files by setting permissions in windows.

Greenlizard0 · 10 Sep 2006 at 03:51

freeware/free version lads?

i know nothing · 10 Sep 2006 at 10:17

Energize said:
Guess they never realised you can just stop people copying, moving and executing files by setting permissions in windows.

How? I wasn't aware of this. Most of the software I've seen including the link above is for a corporate environment, I'm looking for something that is applicable to a standalone machine. All I seem to find on Microsoft's website is how to disable everything, it seems the forthcoming Vista has what I want though.

sniper007 · 10 Sep 2006 at 10:34

I think the guys point was that you are looking at the wrong solution dependant on exactly what you would like to prevent ? ? What exactly are you trying to achieve? Do you want to prevent a system having any contact with files FROM a USB stick?

NathanE · 10 Sep 2006 at 11:02

As said, why give a temporary worker access to your sensitive customer database in the first place? At most they only need permissions to look up individual customers.

i know nothing · 10 Sep 2006 at 11:04

sniper007 said:
I think the guys point was that you are looking at the wrong solution dependant on exactly what you would like to prevent ? ? What exactly are you trying to achieve? Do you want to prevent a system having any contact with files FROM a USB stick?

I want to prevent people from bringing in files and programs and loading them on to the computers hard disk using a USB stick. I also want to prevent users from taking files and other data out on a USB stick. At the same time I do not want to prevent use of the printer etc, I would like to just prevent USB sticks being used.

i know nothing · 10 Sep 2006 at 11:13

NathanE said:
As said, why give a temporary worker access to your sensitive customer database in the first place? At most they only need permissions to look up individual customers.

It's not actually a temporary worker, it's a permanent employee. There is no access to customer data on this particular machine anyway, it is used purely for graphics design. The problem I have is that the individual concerned is bringing in his 'own work' on the stick, using my PC to do it during Company time and then taking it home with him.

dan^uk · 10 Sep 2006 at 11:14

Try this: http://support.microsoft.com/?id=823732

i know nothing · 10 Sep 2006 at 11:22

dan^uk said:
Try this: http://support.microsoft.com/?id=823732

Looks very promising, thanks for that, I shall have a play with it

Energize · 10 Sep 2006 at 15:32

Surely you could just tell him not to? When his usb drive stops working hes probably going to come to you about it anyway.

i know nothing · 10 Sep 2006 at 17:22

Energize said:
Surely you could just tell him not to? When his usb drive stops working hes probably going to come to you about it anyway.

Lol, I've told him twice already to stop, next time he does it he loses his job and he knows it. But being a nice Boss I've decided to protect him from himself.

M0KUJ1N · 10 Sep 2006 at 17:58

You could be verging on dangerous territory here. If you implement this on his machine, you will probably have to implement it on all staff machines or he could make claims of victimisation. Also it would be more readily accepted if it was to be made company policy due to recent abuse of the facility.
A sensible, low-tech solution could be simply to give him more work to do or tighter deadlines. He cant do his own freelance work on your time if he doesnt have time to

i know nothing · 10 Sep 2006 at 18:49

M0KUJ1N said:
You could be verging on dangerous territory here. If you implement this on his machine, you will probably have to implement it on all staff machines or he could make claims of victimisation. Also it would be more readily accepted if it was to be made company policy due to recent abuse of the facility.
A sensible, low-tech solution could be simply to give him more work to do or tighter deadlines. He cant do his own freelance work on your time if he doesnt have time to

It already is Company policy, he has signed a contract of employment that specifically states that he is not allowed to do what he is doing. I couldn't give a toss if he or any other member of staff thinks that I am 'victimising' them by preventing them from breaking their contracts

Burnsy2023 · 10 Sep 2006 at 18:57

Its very easily done via group policy if your on a Windows domain.

Burnsy

Steve09 · 10 Sep 2006 at 19:15

i know nothing said:
next time he does it he loses his job

LMAO

Interviewer - "So why did you get sacked from your last job?"

Man - "Using my USB memory stick at work"

i know nothing · 10 Sep 2006 at 20:19

Continued...

Interviewer - "What? You got the sack just for using a memory stick?"

Man - "Yes"

Interviewer - "Didn't they warn you not to do it?"

Man - "Yes, twice"

Interviewer - "You got warned twice about it but you did it again?"

Man - "Yes"

Interviewer - "Ok....thanks for coming"

Steve09 · 10 Sep 2006 at 20:23

Hey! I made this script, not you lolol

The interviewer did not ask them next questions