Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

Softwar to disable usb, firewire and cd-r / dvd-r

May 28, 2008 10:05AM PDT

Hi, I have some laptops with vista. I need that any user that its not the administrator may not take out any information. Thats why I need something that disables usb, firewire and cd-r/dvd-r. I found very sophiticated programas like 'device lock' or 'sanctuary device control' that operate remotly. I need something simple. Do you know any software for these??

Thanks!

Discussion is locked

- Collapse -
Lock mail and ftp too?
May 29, 2008 7:54AM PDT

Sorry, that's sarcastic.

But I don't know of any simple program that will do this. Maybe others.

Kees

- Collapse -
More serious.
May 29, 2008 6:32PM PDT

If you're concerned about the security of your business data (and it's good to be concerned, indeed) here are some other aspects:
1. Add the password to the secret administrator account, because by default it's a wide open door to your Windows XP PC (could be the same for Vista).
2. Put a password on the BIOS. It's elementary to set it to boot from CD, insert a Linux Live CD and copy data from the hard disk.
3. Use encryption software (like Bitlocker in Vista Ultimate). Nothing easier than getting the hard disk out, mounting it in an external enclosure and copying everything.

Something to read:
http://support.microsoft.com/kb/823732
http://www.petri.co.il/disable_usb_disks_with_gpo.htm
http://diaryproducts.net/about/operating_systems/windows/disable_usb_sticks
There's some support for what you want using policies. That's on OS level, not a utility. I've got no personal experience with it.

And of course, there's the application software like:
http://www.hdguard.com/usb.htm
http://www.softpedia.com/get/Security/Lockdown/USB-LOCK-AP.shtml (mentions CD-ROM also, no firewire).

Of course, as I mentioned in my first post, if they have Internet access they can copy as much as they like to their own personal 2 Gb storage at google or whatever service they use. Or share it wit MSN Messenger. Or mail as an attachment. Or ftp to an ftp-site. So, from a security point of view, Internet should be totally disabled.

Kees

- Collapse -
Gmail FYI
May 29, 2008 7:09PM PDT

emails can be sent up to 20 MB

Gmail capacity is now...

6.7 gigs


I agree, if you're going to do all of this, disable the internet.


Rick