EXPERT RESPONSE
That's a really good question. This is a major bummer for organizations who would like to shut down USB devices altogether, but are stuck with systems that rely exclusively on USB for keyboard and mouse. So, what to do?
The good news here is that Microsoft uses a separate set of drivers for USB keyboard and mouse devices than it does for USB storage drives. Thus, you can use Group Policy to disallow storage drivers from being loaded, while still enabling keyboard and mouse use. There is a wonderful article on how to disable USB devices by Hannes Schmidt.
More information:
Read Ed's previous response: Do USB memory sticks pose enterprise threats?
Are the contents of your USB token being copied to a hidden directory called "iedw." If so, Ed explains what you should do next.
|
