Microsoft® Windows® XP Networking and Security Inside Out: Also Covers Windows 2000

Managing Removable Storage Devices and Printers

Despite an otherwise pervasive focus on security, Windows 2000 and Windows XP allow essentially unfettered access to hardware devices that are connected to a computer. If you want to prevent users from writing data to floppy disks, writable CDs, or Zip disks, for instance, you must physically lock the drive or use Group Policy, as explained in Exploring Security Options. Unfortunately, the restrictions imposed through Group Policy are inadequate for preventing theft of files.

Restricting Access to Removable Storage Devices

The wide availability of portable storage devices such as USB flash drives (UFDs), MP3 players, and digital cameras provides a convenient method for someone who has physical access ...