Comments on: How can you administratively disable the USB port?

By: Professor Messer

Professor Messer — Sun, 13 Dec 2009 00:20:23 +0000

In environments where it’s important to disable the USB port, additional physical security is usually taken to ensure that resetting the BIOS is much more difficult than your computer at home.

By: Josh

Josh — Sat, 12 Dec 2009 20:19:04 +0000

But it is also fairly simple to reset a bios password. I don’t see how just disabling it in the bios would increase the level of security by a significant degree. Unless you were to physically lock the case to prevent tampering.

By: Professor Messer

Professor Messer — Fri, 11 Dec 2009 17:53:23 +0000

A local computer policy isn’t a bad idea, but it doesn’t disable the USB port outside of that Windows configuration. I could easily bring a bootable CD or DVD and have full access to the USB port. By disabling the USB port in the BIOS, there’s no possible way to ever use the USB port, regardless of the operating system.

By: Tom

Tom — Fri, 11 Dec 2009 17:01:13 +0000

What about administering rules via Local Computer Policy?