Setting CD drive permissions in Windows XP for security reasons

Maybe too easy for some administrators. One little disk can easily hold proprietary information or secure data and can just as easily disappear out the door in someone's pocket or purse.

Although applications are usually installed on networked computers via downloads over the corporate LAN, these are the facts: Most office workstations have CD drives whether they need them or not, and almost all CDs sold today can record data. As a result, there may be times when an administrator will want to block the use of CD-R and CD-RW drives for security reasons.

Windows XP provides a way to prevent users from accessing drives with the My Comp

Digg This!     StumbleUpon     Del.icio.us

RELATED CONTENT Windows Server Security Top Windows server hardening standards and guidelines Windows server hardening: How much is enough? Overlooked security in Windows Server 2008 Easing security concerns with Server Core for Windows 2008 Windows PowerShell: A backdoor to malware? Don't end your administrator password with S or L Checking access permissions with Server Share Check Microsoft further tightens security in Windows Server Harden the Remote Access Server Restricting cached credentials in Windows Windows Hardware Strategies Troubleshooting your toughest Windows server crashes High-tech solutions for monitoring computer heat Server virtualization at the hardware level with Hyper-V Virtualization and 64-bit: A match made in Windows heaven How to use the g4u network-based hard disk cloning utility Multi-core processors on the desktop offer major boost When and how to migrate to a 64-bit platform 64-bit Windows – help or hype? How to install low-voltage wiring such as Ethernet or coax cable Bluetooth card reader/USB hub reads files from offbeat media

RELATED RESOURCES 2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems Search Bitpipe.com for the latest white papers and business webcasts Whatis.com, the online computer dictionary

uter option on the desktop. This is done through a setting in the Group Policy Microsoft Management Console (MMC) snap-in called Prevent access to drives from My Computer. (The setting is specifically User Configuration\Administrative Templates\Windows Components\Windows Explorer.) Unfortunately, this setting doesn't always work.

There are two ways to handle the problem. The most direct way is to download a hotfix from Microsoft, but a workaround is also available. It relies on the Remove CD Burning feature command under User Configuration\Administrative Templates\Windows Components\Windows Explorer.

Microsoft discusses this situation, and the fixes, in Knowledge Base article 875555.

About the author: Rick Cook specializes in writing about issues related to storage and storage management.

Rate this Tip To rate tips, you must be a member of SearchWindowsServer.com. Register now to start rating these tips. Log in if you are already a member. Submit a Tip DISCLAIMER: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.