[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\StorageDevicePolici es] "WriteProtect"=dword:00000001
This will turn usb devices to a read only state(xp sp2 or higher), although it won't address the Trojan uploads, it will control if the users or anyone can use them for data leaching. Nice thing, is it doesn't affect software keys or usb passports. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Friday, June 16, 2006 8:35 AM To: Focus Microsoft Subject: RE: Controlling specific USB devices on Windows XP Nothing is stopping you, but if you had a way to stop that, wouldn't you use it? So you're saying I shouldn't wory about USB blocking, because I have no way to stop other methods yet? Should the bank not lock it's doors at night because a burglar could just break a window? And no, that wouldn't set off the security alarm, because we found a way to get in without tripping it, so we followed your logic and disabled it all together. Also, I'm much more likely to get caught with a stack of paper I've printed out, or sitting there taking pictures of my screen (gee, no one would find that odd....). Plus I can get thousands of records on a thumb drive in no time. How long would it take to print a thousand records to my printer, or take a thousand pictures with my camera? And lastly, a "client confidentiality agreement"? You want to base your security policy around the fact that your workers signed a client confidentiality agreement, therefore you know they won't break it? Have fun with that, or check your newspaper for a reality check. Workers breaking coporate agreements, as well as laws protecting confidentiality of client information are being broken on regular occurance. Brady McClenon Administrative Computer Services State University College at Oneonta Oneonta, NY 13820 > -----Original Message----- > From: George Njoku [mailto:[EMAIL PROTECTED] > Sent: Friday, June 16, 2006 8:02 AM > To: McClenon, Braden ([EMAIL PROTECTED]); Focus Microsoft > Subject: RE: Controlling specific USB devices on Windows XP > > And what's to stop you from printing out the records, taking > snapshots of screen with camera. > > If you have access to bank records in your job, and you > really want to take records home, nothing stops you. That's > why I should assume that their was some clients > confidentiality agreement you signed during your hire. > > George Njoku > Turner Engineering, Inc. > 973.263.1000 > [EMAIL PROTECTED] > > > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > Sent: Thursday, June 15, 2006 3:27 PM > To: George Njoku; Focus Microsoft > Subject: RE: Controlling specific USB devices on Windows XP > > See inline... > > > Not really. Say I work at a bank, and I require the 'privilege' to > > access to people bank records while performing my job at > work. Do I > > need to be able to take that information home with me? No, > but what's > > stopping me from downloading thousands of records to my thumb drive > > and taking it home and selling it to whomever will buy the > information? > > > > > ------------------------------------------------------------------------ --- ------------------------------------------------------------------------ --- The information contained in this e-mail transmission is confidential information, proprietary to the sender and legally protected. Its purpose is intended for the sole use of the individual(s) or entity named in the message header. If you are not the intended recipient, you are hereby notified that any dissemination, copying or taking any action in reliance on the contents of this information is strictly prohibited. If you received this message in error, please notify the sender of the error and delete this message and any attachments. --------------------------------------------------------------------------- ---------------------------------------------------------------------------
