SanDisk SD-ROM Bedienungsanleitung PDF herunterladen (Seite 5)

U3 USB Stick (In-)Security

Q2/2007 by Martin Suess, martin.suess@csnc.ch

It is possible to allow a whole Vendor / Product

ID group (e.g. SanDisk U3 Cruzer Micro) and/or

only specific devices which are defined by their

serial numbers:

The permissions can be set for users or groups

and read and write access can be specified.

Additionally, the configured settings can be

distributed and applied to specific (or all) other

computers.

Finally, it is also possible to require encrypted

disks, show user messages and more.

To disable the U3 part of a USB stick but still be

able to use the stick itself, an enterprise could

use a third party software to disable all CD

ROMs except a few whitelisted ones that are

actually used.

Autostart Feature

It is helpful to disable autostart feature for all

devices and not only for CD ROMs. Please

keep in mind that this does only prevent the

autorun feature to start a program

automatically. There is still a high risk since it

takes the user only one wrong click to start

some evil program.

The according registry for Windows XP is:

[HKCU or HKLM]\Software\Microsoft\Windows\

CurrentVersion\Policies\Explorer\

NoDriveTypeAutoRun

The following table explains the meaning of the

bits of the DWORD value (bit set means

disabled):

DRIVE_UNKNOWN 0x01

DRIVE_NO_ROOT_DIR 0x02

Removable Drives 0x04

Harddiscs 0x08

Network Drives 0x10

CD/DVD ROM 0x20

RAMDISK 0x40

Unknown drive type 0x80

All drive types 0xFF

When the key is set in HKLM, a similar key in

HKCU is ignored. Also see the Microsoft

website [9] to get more details.

This can be done through the Group Policy

(GPO) and locally. The following picture shows

the modified GPO setting (Computer

Configuration > Administrative Templates >

System > Turn off Autoplay):

1 2 3 4 5 6 7

U3 USB Stick (In-)Security 1

Kommentare zu diesen Handbüchern

Keine Kommentare

SanDisk SD-ROM Bedienungsanleitung Seite 5

Kommentare zu diesen Handbüchern

Verwandte Produkte und Handbücher für Nein SanDisk SD-ROM