Windows Forum

Ask something
Discussion Locked

Disabling User ability to add hardware

0 helpful
5 replies

by will962 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I would like to know if Win2000/XP can be configured on a workstation to prevent a non-admin user from adding hardware on their machine, e.g. A user comes in with a zip drive and ties it into his Win2000 or XP PC. He reboots the machine and typically, the OS will see the device and add it. Is there a way with the OS to prevent this from occuring? Or am I forced to put the PC in a cast?

5 replies

by mikki

If you downgrade a user's permission to "user" instead of "power user" or "administrator" they may be able to physically plug in the hardware, but should not be able to install the driver or accompanying software without an administrator passcode. The other thing would be depending on your status within your company, you may want to impliment or suggest implimenting a security policy with levels of severe reprimands. I say "security" because if they add an external drive without your knowledge, what information are they taking home? or what possible virus infected files are they putting on? Examples could be written warning, days off without pay & termination of employment.

by shortbus

You might have a problem if Windows XP already has drivers for that device. If the installation of H/W does not require user intervention, then it may proceed successfuly. If you want to lock down their systems, disable (through BIOS or device manager) every physicaly accessible port (serial, parallel, USB, firewire, etc) so that you're intervention is required.

This discussion is closed to new replies.