How to Audit USB Access in Windows XP
 

Hi All,

I am working as a system administrator...around with 90 systems..

As per company Rules all the usb ports of client systems are blocked through GPO...

I noticed one user is access the usb port...because he took the data from home and copy those data into local hard drive of

office system without intimate me...

How is it possible...Because i checked his port..it is blocked..how is he access Usb port...

Is there any way to track the usb access and track which files he copied from usb to local drive and vice-versa...

Are it is possible to track the usb access through Batch file...

Please help me....

thanks in Advance....
Edit/Delete Message

More than likely he used a converter that allowed him to convert a serial port to a usb port....Under GPO rules this would not be a blocked USB port.

http://www.coolgear.com/images/USBG-4.jpg

You will need to set up a new set of permissions to block this type of situation.....or shut down all the extra ports through the BIOS on each computer....or deny installation of USB drivers through the registry settings...which can be done as a batch file.