Help to secure USB ports

cgott42

Member
Jan 6, 2002
156
0
71
I am in charge of a PC used in a public rec area, and we want to make sure that no one can plug in any USB device and infect the computer (e.g. via USB drive, usb wifi , etc) I purchased physical locks, whcih plug into the port and require a physical key to take out and thought that I was reasonably set, however now I realize that the Acer Revo AR3610-U9022 has a wireless k/b mouse which requires a mini-USB receiver plugged into a USB port - thus someone could pull the plug out, and insert a USB drive there
Is there a way to keep the mini-USB receiver plugged in and not allow anyone to access it - or attach a k/b , mouse another way (there is not Pss port)?
FWIW - I have no sensitive data on the PC (i.e not concerned about people d/l'ing from the PC, just don't want them putting anything on it via the USB port)

thx
 

Crusty

Lifer
Sep 30, 2001
12,684
2
81
Use one of your USB headers inside of the case on your mobo instead of outside the case. You might have to disconnect some of the fronts ports to get a header open, but it should be doable.
 

MedicBob

Diamond Member
Nov 29, 2001
4,151
1
0
I second just unplug them. You could move one inside the case for the wireless KB
 

Binky

Diamond Member
Oct 9, 1999
4,046
4
81
Buy a locking metal box. Bolt/screw it down to the table. Cut holes for wires and airflow, and put the computer in the box.
 

cgott42

Member
Jan 6, 2002
156
0
71
Use one of your USB headers inside of the case on your mobo instead of outside the case. You might have to disconnect some of the fronts ports to get a header open, but it should be doable.


thanks , that's a great idea.
However, when I opened the case, everything seems to be soldered on - nothing that I could unplug (except the front USB ports which plug into a 14 pin connector, which also has the on/off button)
 

lxskllr

No Lifer
Nov 30, 2004
59,246
9,751
126
Kind of low budget, but you could make a thin cable noose that goes around the USB adapter, then goes through holes you drilled in the case with a small padlock or bolt to secure it. That won't stop someone with a Leatherman, but it'll foil casual users.

Edit:
added content
 
Last edited:

cgott42

Member
Jan 6, 2002
156
0
71
OK, I opened the case, and looked into the BIOS and here's what I've secured, and what I haven't figured out yet:

Already Secured:
(a) Internal Wifi - opened case, and unplugged antenna wires
(b) Wired Ethernet port - disabled in BIOS
(c) disruption to BIOS settings - via password
(d) USB - physical lock

Probably easily doable:
(a) erase True Image - I have Acronis True Image installed, and an image on the secure zone. I'm worried someone will open the program and delete the image. I can probably uninstall the software w/o deleting the securezone
(b) external eSATA port and external SD flash card port - everything on motherboard is soldered in . Perhaps I can disable in Win7 Device Manager in p/w protected admin account - Can anyone help me in how to identify them (nothing seems obvious)

Haven't figured out: - PLEASE HELP
(a) k/b and mouse are via wireless USB key - thus the USB plug is sticking out and someone could unplug it and put an autorun USB flash drive to cause problems. There isn't an internal plug that I can use to connect the USB plug internally as mentioned. Any ideas - my only thought at the moment is a physical brace around the entire unit (w/ hole for air) preventing someone from pulling out the k/b mouse USB plug, or using eSATA, and flash port - I'll google search, if anyone knows of something already made and cheap let me know, or other idea.
(b) Someone physically stealing the wireless k/b or mouse
(c) how to prevent the users from turning off windows/pc via start/shut down (ie assuming they don't have access to the power button, I want to make sure they don't shut down the PC via start/shut down

Anything else that I should secure or other ideas?

thx
 
Last edited:

sourceninja

Diamond Member
Mar 8, 2005
8,805
65
91
I'm still in shock that there are uses for computers that don't require internet access. LOL.