Security Basics: Re: USB ports Network

[phillip <phillip () cryptolife org>]

On Wednesday 02 May 2007 12:40:37 Tornado wrote:
> Hi All,
>
> We got Windows 2003 AD domain with all the workstations/servers as Windows
> 2000/XP/2003/Vista. As part of our security policy we do not keep the USB
> ports enabled and disable them from BIOS itself. But we want to make sure
> that there are no machines which have USB port left enabled by mistake.
>  Is there any way/software whereby we can check/scan the ports remotely on
> the domain?
>
> Thanks in advance.
Hi tornado,

why you don't use the windows group policy to disable the storage devices on 
your machines ?

here's an example:
http://www.windowsdevcenter.com/pub/a/windows/2005/11/15/disabling-usb-storage-with-group-policy.html

Regards.

Phillip