Re: USB device control software

Have you checked out Safeboot's Port Control?

http://
www.safeboot.com/products/portcontrol/

Chris.

On 7/5/07, Michael van Zwieten <MvanZwietenflcities.com> wrote:
> Hi group... I'm looking for a good USB device control
software that
> would prevent people from plugging in USB drives, USB
keys, firewire,
> reading/writing to floppy's/CD's/etc. and control this
all with Group
> Policy.  I'd like to allow some users or groups to be
able to use these
> devices, but have the majority of our users blocked
from using them.
>
> I've found 2 solutions sofar, and was wondering if you
all had any
> experience with these, and what your thoughts are?  Or
if you have a
> better solution or suggestion?
>
> First one is "Sanctuary Device Control" from
SecureWave:
> http://www.securewave.com/usb_security.jsp?rpLangCode=1
>
> Second one is "DeviceLock" from Smartline:
> http://www.protect-me.c
om/dl/
>
> Thanks much in advance for your responses!
>
> Take care,
> Mike
>
>
>

A basic way of simple control using native interfaces:

In Windows XP, you can edit the following registry key:
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesUSBSTOR


Set the "Start" value stored in this key to a
value of "4".

If you would prefer to implement this via GPO in your
environment, I would
advise looking at http://support
.microsoft.com/kb/555324 

Also, to keep in mind:  if your organization is intending to
use Windows
Server 2003 and Windows Vista, there are a number of GPO
settings
specifically targeted to seamlessly target control of the
USB ports.

In a Vista environment, I would strongly advise getting
ahold of the Windows
Vista Security Guide or referring to it online at
http://www.microsoft.com/technet/windowsvista/s
ecurity/guide.mspx also
available for download at
http://www.microsoft.com/downloads/d
etails.aspx?FamilyId=A3D1BBED-7F35-4E72-
BFB5-B84A526C1565&displaylang=en .

A guide has been specifically written for Vista by Microsoft
on controlling
removable drive access.  This also includes CDRom, floppies,
special devices
involving drivers, etc.  You can take a look at
http://www.microsoft.com/technet/win
dowsvista/library/9fe5bf05-a4a9-44e2-a0c
3-b4b4eaaa37f3.mspx 

Hope these resources help in environments where you may be
looking for
native methods by which to control device usage.

Wayne S. Anderson

-----Original Message-----
From: listbouncesecurityfocus.com [mailto:listbouncesecurityfocus.com] On
Behalf Of Chris Barber
Sent: Tuesday, July 31, 2007 1:11 PM
To: Michael van Zwieten
Cc: focus-mssecurityfocus.com
Subject: Re: USB device control software

Have you checked out Safeboot's Port Control?

http://
www.safeboot.com/products/portcontrol/

Chris.

On 7/5/07, Michael van Zwieten <MvanZwietenflcities.com> wrote:
> Hi group... I'm looking for a good USB device control
software that
> would prevent people from plugging in USB drives, USB
keys, firewire,
> reading/writing to floppy's/CD's/etc. and control this
all with Group
> Policy.  I'd like to allow some users or groups to be
able to use these
> devices, but have the majority of our users blocked
from using them.
>
> I've found 2 solutions sofar, and was wondering if you
all had any
> experience with these, and what your thoughts are?  Or
if you have a
> better solution or suggestion?
>
> First one is "Sanctuary Device Control" from
SecureWave:
> http://www.securewave.com/usb_security.jsp?rpLangCode=1
>
> Second one is "DeviceLock" from Smartline:
> http://www.protect-me.c
om/dl/
>
> Thanks much in advance for your responses!
>
> Take care,
> Mike
>
>
>

Secure Wave ( sanctuary Device Control ) goes far ahead then
just
controlling I/O devices ( USB ) ..


Cheers

Saurabh Kaushik


                                                            
              
                      "Chris Barber"              
                        
                <cmbarbergmail.com>              
                        
                         assSent by:                        
           To 
             listbouncesecurityfocu         "Michael van
Zwieten"         
                               s.com        
<MvanZwietenflcities.com>    
                                                            
           cc 
                                             focus-mssecurityfocus.com    
                 01/08/2007 12:40 AM                        
      Subject 
                                             Re: USB device
control        
                                             software       
              
                                                            
              
                                                            
              
                                                            
              
                                                            
              
                                                            
              
                                                            
              




Have you checked out Safeboot's Port Control?

http://
www.safeboot.com/products/portcontrol/

Chris.

On 7/5/07, Michael van Zwieten <MvanZwietenflcities.com> wrote:
> Hi group... I'm looking for a good USB device control
software that
> would prevent people from plugging in USB drives, USB
keys, firewire,
> reading/writing to floppy's/CD's/etc. and control this
all with Group
> Policy.  I'd like to allow some users or groups to be
able to use these
> devices, but have the majority of our users blocked
from using them.
>
> I've found 2 solutions sofar, and was wondering if you
all had any
> experience with these, and what your thoughts are?  Or
if you have a
> better solution or suggestion?
>
> First one is "Sanctuary Device Control" from
SecureWave:
> http://www.securewave.com/usb_security.jsp?rpLangCode=1
>
> Second one is "DeviceLock" from Smartline:
> http://www.protect-me.c
om/dl/
>
> Thanks much in advance for your responses!
>
> Take care,
> Mike
>
>
>

Disclaimer : 
This message (including any attachments) contains
confidential information. If you are not the intended
recipient, please delete the message (including any
attachments) from your system without using, transmitting or
storing it. Please also immediately inform the sender.
E-mails are not secure and may suffer from errors, viruses,
unauthorized interceptions / amendments. CRISIL and its
subsidiaries do not accept any liability for loss or damage
caused by this e-mail and may monitor e-mail traffic.