The good news here is that Microsoft uses a separate set of drivers for USB keyboard and mouse devices than it does for USB storage drives. Thus, you can use Group Policy to disallow storage drivers from being loaded, while still enabling keyboard and mouse use. There is a wonderful article on how to disable USB devices by Hannes Schmidt.
Dig Deeper on Information security policies, procedures and guidelines
Related Q&A from Ed Skoudis
Learn how social networking sites compound the insider threat risk, and explore how to mitigate the threat with policy, training and technology. Continue Reading
At Black Hat 2006, researcher Joanna Rutkowska unveiled a piece of machine-based malware called the Blue Pill. But is it a serious threat to your ... Continue Reading
Wi-Fi on airplanes seems like it will be unavoidable in the future, but what security risks does it pose? In this security threats expert response, ... Continue Reading