I’m looking for a way to secure USB ports (avoiding things like superglue or physical removal). I’ve read a little about Registry edits, and denying permissions to Usbstor.pnf && USBstor.inf, even BIOS settings. None of these seems to match exactly what I’m after.
1. I’ll need to be able to use at least some of the USB ports (preferably all) for connecting non-storage peripherals (printer, mouse, keyboard).
2. I want to deny the use of any storage devices from any USB ports.
3. I don’t want to use a third party source, if avoidable.
4. I’m happy coding something on my own if someone can clue me in on how to do it in C, C++, or VBScript.
5. The machine users all have admin rights (I know, it’s terrible, but it wasn’t my call), so I have to find a way to supercede that right. Maybe setting things up as System?
Cheers in advance for any help!
-A.
