Data theft and USB etc 1

[DanielUK]

I've been doing a fair bit of reading around protecting sensitive data and disabling access to writeable devices e.g. CD writer, floppy disk etc

We have a mixed environment of windows 2000 Prof and Win XP Pro on a network running win2k server. A lot of the desktops print locally to their USB printers and I was wondering if there is a way to still use these printers yet somehow disable downloading to a USB device?

Also, is there any good software that will detect and manage who, how and where data and documents are viewed, copied etc?

Thanks

Dan

 

[Grenage]

You'll want to disable the USBSTOR service, which you can do in the registry. It's a basic on/off in Win2k, a bit better in XP and apparently it's decent in Vista.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsbStor

4 = off and 3 = on.

Well, or vice versa, you'll know depending on what is already in there. It's been a while.

Carlsberg don't run I.T. departments, but if they did they'd probably be more fun.