particular users I want to block CDROM and USB access

I am using win2003 server and clients are winXP and Vista. for particular
users I want to block CDROM and USB access,
please provide some solution.

Check out this group policy, I believe it is what you are looking for.

http://support.microsoft.com/kb/555324

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4

Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.

Hi
Do you have Active Directory domain?
Assuming yes, you can use that template and apply it using a new GPO or
importing the template to an existing one. Remember that by default the
computers are at computers container, and to apply that policy to the
computers in the computers container you either need to use a domain policy
(and that will affect all computers in the domain) or apply it at Site level
and all computers in that site will be affected by that GPO new settings. To
avoid this, move the computers to a new OU and create a new GPO and link it
to that OU where the computers are, them configure the new settings.
--

I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MVP Directory Services

Hello Ramana,

With Vista and XP you can use the new Group policy preferences when installing
Client side extensions on the machines. Either under computer or user configuration
open preferences, Control panel settings, devices, here rightclick and choose
NEW DEVICE, enable or disable and then a list pops up with the hardware.

To manage this you need either a Vista with RSAT installed or server 2008.

Download and install RSAT on Vista/2008:

RSAT 32bit:
http://www.microsoft.com/downloads/d...displaylang=en

RSAT 64bit:
http://www.microsoft.com/downloads/d...displaylang=en

Then open Control Panele, Programs and features, Turn windows features on
or off, check the tools you like under "Remote Server Administration Tools"


CSE XP 32bit:
http://www.microsoft.com/downloads/d...displaylang=en

CSE XP 64bit:
http://www.microsoft.com/downloads/d...displaylang=en

CSE 2003 32 bit:
http://www.microsoft.com/downloads/d...displaylang=en

CSE 2003 64bit:
http://www.microsoft.com/downloads/d...displaylang=en

CSE Vista 32bit:
http://www.microsoft.com/downloads/d...displaylang=en

CSE Vista 64bit:
http://www.microsoft.com/downloads/d...displaylang=en


Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.

Hi Paul Bergson,

Thanks for reply,

I found template that Disable USB fine, but this will apply all users, if i
want allow few uers to access how can do that (means certain times some users
want access UCB how can i do this condition?) ? can you help me in this.

Thank,
Ramana.SV

Thanks for reply,

I found template that Disable USB fine, but this will apply all users, if i
want allow few uers to access how can do that (means certain times some users
want access UCB how can i do this condition?) ? can you help me in this.

how to use this .adm template in ad please help me....


Thank,
Ramana.SV

You just build a security group to only apply to those users that you want.
When you build the gpo give this new security group read and apply
permissions and remove from everyone else the apply permission.

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4



Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.

I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MVP Directory Services