KB Article 823732

[M. Murphy]

I was going from computer to computer in our network, disabling flash drives
thru the registry as per KB article 823732, when one of our xp pro computers
didnt respond to the registry change. The flash drive still worked, but this
fix was successful on all the other machines. So I try the alternate method,
change the security settings for 2 files. It was then that I noticed that
there is no security tab under the files properties.
After a little research I learn that you won't see this tab unless the disk
is formatted with NTFS. I was'nt working here when the machine was built -
who uses fat32 anymore?

My question is, how the heck can I get to the files security settings? I
don't think its possible, but want to confirm this with those wiser than I
.....

Computer is XP professional, and is joined to a SBS 2003 server domain
(properly). I am not very good with group policy, where I hear you can
disable usb flash drives also, but I get the feeling I will be learning more
about it very soon!!

[Kurosh]

Under FAT32, there are no file-level security settings -- your only real
option here is to convert it to NTSF:

http://support.microsoft.com/kb/307881

http://support.microsoft.com/kb/810142

Group Policy is very powerful, and is probably a good option for what you're
trying to accomplish. Again, Group Policy will only work properly with NTSF
file systems.

Another option is to disable the USB ports on that computer (through the
BIOS) -- however, this would prevent use of any USB device, which is somewhat
drastic.

Best Wishes,
Kurosh


"M. Murphy" wrote:

> I was going from computer to computer in our network, disabling flash drives
> thru the registry as per KB article 823732, when one of our xp pro computers
> didnt respond to the registry change. The flash drive still worked, but this
> fix was successful on all the other machines. So I try the alternate method,
> change the security settings for 2 files. It was then that I noticed that
> there is no security tab under the files properties.
> After a little research I learn that you won't see this tab unless the disk
> is formatted with NTFS. I was'nt working here when the machine was built -
> who uses fat32 anymore?
>
> My question is, how the heck can I get to the files security settings? I
> don't think its possible, but want to confirm this with those wiser than I
> ....
>
> Computer is XP professional, and is joined to a SBS 2003 server domain
> (properly). I am not very good with group policy, where I hear you can
> disable usb flash drives also, but I get the feeling I will be learning more
> about it very soon!!

[M. Murphy]

Thank you, that answers my question. Can't really disable usb in the bios,
the computer uses a backup drive that connects via usb port.
Looks like a crash course in group policy will be in my near future. Anyone
have any good sites/books for learning about group policy?

"Kurosh" wrote:

> Under FAT32, there are no file-level security settings -- your only real
> option here is to convert it to NTSF:
>
> http://support.microsoft.com/kb/307881
>
> http://support.microsoft.com/kb/810142
>
> Group Policy is very powerful, and is probably a good option for what you're
> trying to accomplish. Again, Group Policy will only work properly with NTSF
> file systems.
>
> Another option is to disable the USB ports on that computer (through the
> BIOS) -- however, this would prevent use of any USB device, which is somewhat
> drastic.
>
> Best Wishes,
> Kurosh
>
>
> "M. Murphy" wrote:
>
> > I was going from computer to computer in our network, disabling flash drives
> > thru the registry as per KB article 823732, when one of our xp pro computers
> > didnt respond to the registry change. The flash drive still worked, but this
> > fix was successful on all the other machines. So I try the alternate method,
> > change the security settings for 2 files. It was then that I noticed that
> > there is no security tab under the files properties.
> > After a little research I learn that you won't see this tab unless the disk
> > is formatted with NTFS. I was'nt working here when the machine was built -
> > who uses fat32 anymore?
> >
> > My question is, how the heck can I get to the files security settings? I
> > don't think its possible, but want to confirm this with those wiser than I
> > ....
> >
> > Computer is XP professional, and is joined to a SBS 2003 server domain
> > (properly). I am not very good with group policy, where I hear you can
> > disable usb flash drives also, but I get the feeling I will be learning more
> > about it very soon!!

[Kurosh]

If I'm understanding you correctly, this computer uses a USB storage device
for backups. In that case, using KB 823732 to disable USB storage isn't a
good idea -- if you get it to work, it will not only prevent USB flash
drives, but the backup drive as well (at least, that's my understanding from
reading the article -- I could be wrong). You might want to verify this with
Microsoft before you try implementing it.

Best Wishes,
Kurosh


"M. Murphy" wrote:

> Thank you, that answers my question. Can't really disable usb in the bios,
> the computer uses a backup drive that connects via usb port.
> Looks like a crash course in group policy will be in my near future. Anyone
> have any good sites/books for learning about group policy?
>
> "Kurosh" wrote:
>
> > Under FAT32, there are no file-level security settings -- your only real
> > option here is to convert it to NTSF:
> >
> > http://support.microsoft.com/kb/307881
> >
> > http://support.microsoft.com/kb/810142
> >
> > Group Policy is very powerful, and is probably a good option for what you're
> > trying to accomplish. Again, Group Policy will only work properly with NTSF
> > file systems.
> >
> > Another option is to disable the USB ports on that computer (through the
> > BIOS) -- however, this would prevent use of any USB device, which is somewhat
> > drastic.
> >
> > Best Wishes,
> > Kurosh
> >
> >
> > "M. Murphy" wrote:
> >
> > > I was going from computer to computer in our network, disabling flash drives
> > > thru the registry as per KB article 823732, when one of our xp pro computers
> > > didnt respond to the registry change. The flash drive still worked, but this
> > > fix was successful on all the other machines. So I try the alternate method,
> > > change the security settings for 2 files. It was then that I noticed that
> > > there is no security tab under the files properties.
> > > After a little research I learn that you won't see this tab unless the disk
> > > is formatted with NTFS. I was'nt working here when the machine was built -
> > > who uses fat32 anymore?
> > >
> > > My question is, how the heck can I get to the files security settings? I
> > > don't think its possible, but want to confirm this with those wiser than I
> > > ....
> > >
> > > Computer is XP professional, and is joined to a SBS 2003 server domain
> > > (properly). I am not very good with group policy, where I hear you can
> > > disable usb flash drives also, but I get the feeling I will be learning more
> > > about it very soon!!

[M. Murphy]

Yikes! Did'nt even think about the backup drive. Just checked, and it
disabled the backup drive, but it still let the flash drive work. Very
strange. I reset the value back to 3 in the registry. Still looking for
good learning resources on GPO, and will post that question on the SBS group,
Thanks for pointing that out, would have been scratching my head on backup
day!!

"Kurosh" wrote:

> If I'm understanding you correctly, this computer uses a USB storage device
> for backups. In that case, using KB 823732 to disable USB storage isn't a
> good idea -- if you get it to work, it will not only prevent USB flash
> drives, but the backup drive as well (at least, that's my understanding from
> reading the article -- I could be wrong). You might want to verify this with
> Microsoft before you try implementing it.
>
> Best Wishes,
> Kurosh
>
>
> "M. Murphy" wrote:
>
> > Thank you, that answers my question. Can't really disable usb in the bios,
> > the computer uses a backup drive that connects via usb port.
> > Looks like a crash course in group policy will be in my near future. Anyone
> > have any good sites/books for learning about group policy?
> >
> > "Kurosh" wrote:
> >
> > > Under FAT32, there are no file-level security settings -- your only real
> > > option here is to convert it to NTSF:
> > >
> > > http://support.microsoft.com/kb/307881
> > >
> > > http://support.microsoft.com/kb/810142
> > >
> > > Group Policy is very powerful, and is probably a good option for what you're
> > > trying to accomplish. Again, Group Policy will only work properly with NTSF
> > > file systems.
> > >
> > > Another option is to disable the USB ports on that computer (through the
> > > BIOS) -- however, this would prevent use of any USB device, which is somewhat
> > > drastic.
> > >
> > > Best Wishes,
> > > Kurosh
> > >
> > >
> > > "M. Murphy" wrote:
> > >
> > > > I was going from computer to computer in our network, disabling flash drives
> > > > thru the registry as per KB article 823732, when one of our xp pro computers
> > > > didnt respond to the registry change. The flash drive still worked, but this
> > > > fix was successful on all the other machines. So I try the alternate method,
> > > > change the security settings for 2 files. It was then that I noticed that
> > > > there is no security tab under the files properties.
> > > > After a little research I learn that you won't see this tab unless the disk
> > > > is formatted with NTFS. I was'nt working here when the machine was built -
> > > > who uses fat32 anymore?
> > > >
> > > > My question is, how the heck can I get to the files security settings? I
> > > > don't think its possible, but want to confirm this with those wiser than I
> > > > ....
> > > >
> > > > Computer is XP professional, and is joined to a SBS 2003 server domain
> > > > (properly). I am not very good with group policy, where I hear you can
> > > > disable usb flash drives also, but I get the feeling I will be learning more
> > > > about it very soon!!

[Kurosh]

You're welcome, and good luck with GPO.

Best Wishes,
Kurosh


"M. Murphy" wrote:

> Yikes! Did'nt even think about the backup drive. Just checked, and it
> disabled the backup drive, but it still let the flash drive work. Very
> strange. I reset the value back to 3 in the registry. Still looking for
> good learning resources on GPO, and will post that question on the SBS group,
> Thanks for pointing that out, would have been scratching my head on backup
> day!!
>
> "Kurosh" wrote:
>
> > If I'm understanding you correctly, this computer uses a USB storage device
> > for backups. In that case, using KB 823732 to disable USB storage isn't a
> > good idea -- if you get it to work, it will not only prevent USB flash
> > drives, but the backup drive as well (at least, that's my understanding from
> > reading the article -- I could be wrong). You might want to verify this with
> > Microsoft before you try implementing it.
> >
> > Best Wishes,
> > Kurosh
> >
> >
> > "M. Murphy" wrote:
> >
> > > Thank you, that answers my question. Can't really disable usb in the bios,
> > > the computer uses a backup drive that connects via usb port.
> > > Looks like a crash course in group policy will be in my near future. Anyone
> > > have any good sites/books for learning about group policy?
> > >
> > > "Kurosh" wrote:
> > >
> > > > Under FAT32, there are no file-level security settings -- your only real
> > > > option here is to convert it to NTSF:
> > > >
> > > > http://support.microsoft.com/kb/307881
> > > >
> > > > http://support.microsoft.com/kb/810142
> > > >
> > > > Group Policy is very powerful, and is probably a good option for what you're
> > > > trying to accomplish. Again, Group Policy will only work properly with NTSF
> > > > file systems.
> > > >
> > > > Another option is to disable the USB ports on that computer (through the
> > > > BIOS) -- however, this would prevent use of any USB device, which is somewhat
> > > > drastic.
> > > >
> > > > Best Wishes,
> > > > Kurosh
> > > >
> > > >
> > > > "M. Murphy" wrote:
> > > >
> > > > > I was going from computer to computer in our network, disabling flash drives
> > > > > thru the registry as per KB article 823732, when one of our xp pro computers
> > > > > didnt respond to the registry change. The flash drive still worked, but this
> > > > > fix was successful on all the other machines. So I try the alternate method,
> > > > > change the security settings for 2 files. It was then that I noticed that
> > > > > there is no security tab under the files properties.
> > > > > After a little research I learn that you won't see this tab unless the disk
> > > > > is formatted with NTFS. I was'nt working here when the machine was built -
> > > > > who uses fat32 anymore?
> > > > >
> > > > > My question is, how the heck can I get to the files security settings? I
> > > > > don't think its possible, but want to confirm this with those wiser than I
> > > > > ....
> > > > >
> > > > > Computer is XP professional, and is joined to a SBS 2003 server domain
> > > > > (properly). I am not very good with group policy, where I hear you can
> > > > > disable usb flash drives also, but I get the feeling I will be learning more
> > > > > about it very soon!!