Assuming you are working in a corporate environment I like Mark Teicher's
Securewave recommendation. Cisco's Security Agent is another centrally
managed alternative. A few years ago Cisco purchased Okena which had a
product called Stormwatch. That product is now CSA (Cisco Security Agent).
Both Securewave and Cisco Security Agent are referred to as 2nd generation
desktop security solutions and offer the ability to prevent/allow data
transfer for any I/O device.

-----Original Message-----
From: Alvaro Prieto [mailto:alvaro (at) apg88 (dot) com [email concealed]]
Sent: Tuesday, March 08, 2005 10:48 AM
To: Victor Pereira
Cc: focus-ms (at) securityfocus (dot) com [email concealed]
Subject: Re: Disabling USB mass storage

How about getting USB to PS2 adapter for those who have a usb mouse?
Like this one here: http://sewelldirect.com/PS2toUSB.asp

Alvaro

Victor Pereira wrote:

>And what about W2k ? I can't use GPO to restrict usb read/writing..
>does exist any solution without a 3rd part software ?
>
>
>On Sun, 6 Mar 2005 03:20:42 -0800 (PST), sanjiv <ska262001 (at) yahoo.co (dot) in [email concealed]>
wrote:
>
>
>>we are doing the same for the time being but now system come with USB
>>mouse and hence the problem. Is it possible to restrict by some means
>>this USB port to use only USB mouse?
>>
>>Is there a tool or someway to detect all systems on the domain where
>>USB port is open? <As a cross-check and to be double sure>
>>
>>Best regards,
>>Sanjiv
>>
>>
>>--- Bob <Bob (at) dexis (dot) net [email concealed]> wrote:
>>
>>
>>
>>>Why not just disable the USB in bios and set a password on the bios
>>>for setup?
>>>
>>>Works for me all the time.
>>>
>>>Bob
>>>
>>>
>>>
>>>
>>>
>>>Mark Teicher wrote:
>>>
>>>
>>>>Sanctuary from SecureWave <www.securewave.com> is
>>>>
>>>>
>>>good for locking down other external connectors also from an
>>>enterprise perspective
>>>
>>>
>>>>-----Original Message-----
>>>>From: Lynn Preston <saint_vitus (at) arcticmail (dot) com [email concealed]>
>>>>Sent: Mar 3, 2005 3:18 PM
>>>>To: Martin a Marika TYDOROVCI <tydy (at) szm (dot) sk [email concealed]>,
>>>>
>>>>
>>>focus-ms (at) securityfocus (dot) com [email concealed]
>>>
>>>
>>>>Subject: Re: Disabling USB mass storage
>>>>
>>>>Martin,
>>>>Not sure of your specific requirements, but
>>>>
>>>>
>>>there's a software title by the name of DeviceLock that works well.
>>>
>>>
>>>>It works well with all devices. The only drawback
>>>>
>>>>
>>>is that if the user is a member of the Local Admin group, they
>>>
>>>
>>>>can alter the settings.
>>>>
>>>>http://devicelock.securitybyte.com/
>>>>
>>>>Just some more thoughts. Take Care !
>>>>
>>>>- Lynn Preston
>>>>
>>>>
>>>>----- Original Message -----
>>>>From: "Martin a Marika TYDOROVCI" <tydy (at) szm (dot) sk [email concealed]>
>>>>To: focus-ms (at) securityfocus (dot) com [email concealed]
>>>>Subject: Disabling USB mass storage
>>>>Date: Wed, 02 Mar 2005 21:10:08 +0100
>>>>
>>>>
>>>>
>>>>
>>>>>Hi list,
>>>>>
>>>>>Does anyone knows a way to disable USB mass
>>>>>
>>>>>
>>>storage device in Win
>>>
>>>
>>>>>XP? I need to disable using devices such as USB
>>>>>
>>>>>
>>>flash drive, card
>>>
>>>
>>>>>readers, etc.
>>>>>
>>>>>Regards
>>>>>
>>>>>
>>>>>
>>>>--------------------------------------------------------------------

>>>>-------
>>>>
>>>>
>>>>--------------------------------------------------------------------

>>>>-------
>>>>
>>>>
>>>>
>>>>
>>>
>>>
>>----------------------------------------------------------------------

>>-----
>>
>>
>>----------------------------------------------------------------------

>>-----
>>
>>
>>>
>>>
>>__________________________________
>>Celebrate Yahoo!'s 10th Birthday!
>>Yahoo! Netrospective: 100 Moments of the Web
>>http://birthday.yahoo.com/netrospective/
>>
>>----------------------------------------------------------------------

>>-----
>>----------------------------------------------------------------------

>>-----
>>
>>
>>
>>
>
>-----------------------------------------------------------------------

>----
>-----------------------------------------------------------------------

>----
>
>
>
>
>

------------------------------------------------------------------------
---
------------------------------------------------------------------------
---

------------------------------------------------------------------------
---
------------------------------------------------------------------------
---

[ reply ]