Security Basics mailing list archives
Re: Selectively disabling USB devices
From: Neksus <neksus () gmail com>
Date: Wed, 23 Nov 2005 13:49:27 -0500
Pranav, I am not aware of a free possibility (if you ever do, please let me know) but there are many commercial software who can do this by using the USB device ID to permit/deny the use. It only works if the user is not an administrator although I assisted a presentation by Verdasys (Digital Guardian) which claimed they could bypass this issue by hooking in the kernel at boot time. I'm not a Windows engineer so I can't confirm is this is real or bogus but the presentation seemed satisfactory for me. Unfortunately, we haven't opted for that product. Instead we used a tool named Device Lock which can do the same thing. We don't have a problem with users being administrator so this works fine. Please note that (as far as I know), Firewire doesn't have different IDs per device so you can only do "disabled", "read" or "read write". USB provides much better managability. (N)
Is it possible to selectively disable USB devices? For instance, only mice and printers should work when connected to a USB port but flash drives, other mp3 players etc should not work when connected to the same USB ports.
Current thread:
- Selectively disabling USB devices Pranav Lal (Nov 23)
- Re: Selectively disabling USB devices Tom Yarrish (Nov 24)
- Re: Selectively disabling USB devices ilaiy (Nov 24)
- RE: Selectively disabling USB devices Aditya Deshmukh (Nov 24)
- Re: Selectively disabling USB devices Sandeep Agarwal (Nov 24)
- Re: Selectively disabling USB devices Bernardo Wernesback (Nov 25)
- <Possible follow-ups>
- Re: Selectively disabling USB devices b . hines (Nov 24)
- Re: Selectively disabling USB devices Neksus (Nov 24)
- Re: Selectively disabling USB devices Richard Bennison (Nov 25)
- RE: Selectively disabling USB devices Lalit Gupta (Nov 24)
- Re: RE: Selectively disabling USB devices johnsonian_uk (Nov 25)
- Re: Re: RE: Selectively disabling USB devices carry . van . eijk (Nov 28)
- Re: Selectively disabling USB devices agnideewar (Nov 28)