Disabling floppy drive access

[Norwich]

Hi,

I'm looking for a software/OS based method to disable the floppy drive on all Win2K pro machines on the network for non-admin users.

Something like system policies would be good but no policies are currenty implemented - and although all workstations are Win2k pro, the domain controllers are NT4 server (so no active directory structure).

Any ideas welcome - especially those that don't involve walking around to all 50 machines

Norwich

 

[rathcoffey]

This will hide the floppy drive in Windows but wont disable it using dos.

The way to do this is to create a registry key and then deploy it across the network using a logon script (considering there is no AD structure).

To disable Floppy access.

Go to HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Add a DWORD value NoDrives with a decimal value of 1

The floppy drive will not be shown in windows however there will be access at command prompt or at the run command.

Mightnt be the best fix but if all else fails.......

Let me know how yoou get on

Rathcoffey

 

[Norwich]

Thanks,

I've looked into disabling it with computer manager but that requires attendence at the PC. I think I'll do that medium term - as most machines will need visitng at some point over the next month or two.

The use of a login script to block it out of explorer sounds a good short term fix. Do you know of any good resources I could look at about deploying/modifying registry keys as scripts?

Thanks,

Norwich

 

[techz2050]

The easiest way is to disable it in device manager.
Also in group policy MMC, if you go in User configration, administrative templates, windows components , windows explorer...there is a policy to "hide drives from computer". You can select floppy drive in it. The drive would be still accessible from run command. Thanks