This is a good way to be pro-active. Why have USB mass storage enabled? Users should not have the option to use USB memory sticks or portable hard drives unless there are a good reason for it. Disable mass storage support

<?xml version="1.0" encoding="utf-8"?>
<ScriptExport xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns="http://www.kaseya.com/vsa/2008/12/Scripting">
  <Procedure name="Security - Disable Mass Storage Support (USB)" treePres="3">
    <Body description="Description: This procedure will  disable the USB mass storage support.&#xD;&#xA;&#xD;&#xA;Dependencies: None.&#xD;&#xA;&#xD;&#xA;Kaseya customer value: Procedure to secure clients.&#xD;&#xA;&#xD;&#xA;End user value: Limiting the risks for malware and virus attacks, downtime and dataloss.&#xD;&#xA;&#xD;&#xA;Usage: Execture the procedure at any time.&#xD;&#xA; &#xD;&#xA;Script maintainer: ronny [at] upstream.se&#xD;&#xA;&#xD;&#xA;Support: This script is delivered &quot;as is&quot; No support included.">
      <Statement description="Disables USB mass storage device in the registry." name="SetRegistryValue" continueOnFail="false" osType="NT4|2000|XP|2003|Vista|2008">
        <Parameter xsi:type="StringParameter" name="RegistryPath" value="HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR\Start" />
        <Parameter xsi:type="StringParameter" name="Value" value="4" />
        <Parameter xsi:type="EnumParameter" name="DataType" value="Integer" />
      </Statement>
      <Statement description="Writes a procedure log entry." name="WriteScriptLogEntry" continueOnFail="false" osType="NT4|2000|XP|2003|Vista|2008">
        <Parameter xsi:type="StringParameter" name="Comment" value="Mass storage support is now disabled." />
      </Statement>
    </Body>
  </Procedure>
</ScriptExport>
Enable mass storage support (if you have good reasons):
<?xml version="1.0" encoding="utf-8"?>
<ScriptExport xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns="http://www.kaseya.com/vsa/2008/12/Scripting">
  <Procedure name="Security - Enable Mass Storage Support (USB)" treePres="3">
    <Body description="Description: This procedure will enable the USB mass storage support.&#xD;&#xA;&#xD;&#xA;Dependencies: None.&#xD;&#xA;&#xD;&#xA;Kaseya customer value: If the disabled mass storage device is needed this procedure will quickly enable the function.&#xD;&#xA;&#xD;&#xA;End user value: If the disabled mass storage device is needed this procedure will quickly enable the function.&#xD;&#xA;&#xD;&#xA;Usage: Execute the procedure at any time.&#xD;&#xA; &#xD;&#xA;Script maintainer: ronny [at] upstream.se&#xD;&#xA;&#xD;&#xA;Support: This script is delivered &quot;as is&quot; No support included.">
      <Statement description="" name="SetRegistryValue" continueOnFail="false" osType="NT4|2000|XP|2003|Vista|2008">
        <Parameter xsi:type="StringParameter" name="RegistryPath" value="HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR\Start" />
        <Parameter xsi:type="StringParameter" name="Value" value="3" />
        <Parameter xsi:type="EnumParameter" name="DataType" value="Integer" />
      </Statement>
      <Statement description="Writes a procedure log entry." name="WriteScriptLogEntry" continueOnFail="false" osType="NT4|2000|XP|2003|Vista|2008">
        <Parameter xsi:type="StringParameter" name="Comment" value="Mass storage support is now e." />
      </Statement>
    </Body>
  </Procedure>
</ScriptExport>


Legacy Forum Name: Security - Enable &amp; Disable Mass Storage Support (USB),
Legacy Posted By Username: eron



[edited by: Brendan Cosgrove at 5:44 PM (GMT -8) on 12-20-2010] .