Flash drive security - enterprise level

[BT7990]

Workplace has over 1700 machines with the same image. We need to restrict users from using flash/pen drives. Can't disable USB ports because we use USB peripherals on the machines. W2K domain and not using AD to manage the machines (no flames-not my choice) and reasearch so far found nothing in AD to accomplish this need. Image locked down with a variety of reg hacks (local machine and default user profile).


Searching I found

SecureWave - Sanctuary Signed up for demo software to test.

Anyone have exposure to the product or other suggestions?

 

[Peter]

Windows XP SP2 lets you set all removable storage read-only. That'll prevent users from taking company data home.

You could also attempt screwing up all USB mass storage class drivers by installing dummy replacements. Or something like that. (In Linux, you'd set admin-only permissions onto the respective device nodes.)

 

[BT7990]

Thanks for the info. I did not put in the first post that the image is W2k SP4.