[OPLINTECH] memory sticks

Philip Robinette robineph@oplin.org
Fri, 5 Aug 2005 13:48:41 -0400


This is a multi-part message in MIME format.

------=_NextPart_000_03B6_01C599C4.63713350
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Barb,

With XP Pro you can create Path Rules in "Local Security =
Settings\Software Restriction Policies\Additional Rules" that prevent =
users from running any executable file extension from specified paths, =
including whole drives.  Administrators can be exempted under "Software =
Restriction Policies\Enforcement".   I recommend that you prevent =
execution from all removable drives including the letters that are =
assigned to USB flash drives, plus the "Documents and Settings" folder, =
so that users cannot just copy programs to their desktops.  You will =
probably need to remove the extensions .lnk and .url from "Software =
Restriction Policies\Designated File Types", so users can execute =
Desktop and Internet shortcuts.

See  http://webjunction.org/do/DisplayContent?id=3D8896 and =
http://www.microsoft.com/technet/security/prodtech/windowsxp/secwinxp/xps=
gch06.mspx.

Franklin Library
  ----- Original Message -----=20
  From: Barb Marshal=20
  To: OPLINTECH@oplin.org=20
  Sent: Thursday, August 04, 2005 4:52 PM
  Subject: [OPLINTECH] memory sticks


  Can memory sticks carry viruses the same as cd's and floppys?  Should =
we allow patrons to bring them in and use them in our machines?

  Barb
  marshaba@olpin.org
------=_NextPart_000_03B6_01C599C4.63713350
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 6.00.2800.1505" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT size=3D2>Barb,</FONT></DIV>
<DIV><FONT size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT size=3D2>With XP Pro you can create Path Rules in "Local =
Security=20
Settings\Software Restriction Policies\Additional Rules" that prevent =
users from=20
running any executable file extension from specified paths, including =
whole=20
drives.&nbsp; Administrators can be exempted under "Software Restriction =

Policies\Enforcement".&nbsp;  I recommend that you prevent execution =
from all=20
removable drives including the letters that are assigned to USB flash =
drives,=20
plus the "Documents and Settings" folder, so that users cannot just copy =

programs to their desktops.&nbsp; You will probably need to remove the=20
extensions .lnk and .url from "Software Restriction Policies\Designated =
File=20
Types", so users can execute Desktop&nbsp;and Internet =
shortcuts.</FONT></DIV>
<DIV><FONT size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT size=3D2>See&nbsp; <A=20
href=3D"http://webjunction.org/do/DisplayContent?id=3D8896">http://webjun=
ction.org/do/DisplayContent?id=3D8896</A>&nbsp;and=20
<A=20
href=3D"http://www.microsoft.com/technet/security/prodtech/windowsxp/secw=
inxp/xpsgch06.mspx">http://www.microsoft.com/technet/security/prodtech/wi=
ndowsxp/secwinxp/xpsgch06.mspx</A>.</FONT></DIV>
<DIV><FONT size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT size=3D2>Franklin Library</FONT></DIV>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
  <DIV style=3D"FONT: 10pt arial">----- Original Message ----- </DIV>
  <DIV=20
  style=3D"BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: =
black"><B>From:</B>=20
  <A title=3Dmarshaba@oplin.org href=3D"mailto:marshaba@oplin.org">Barb =
Marshal</A>=20
  </DIV>
  <DIV style=3D"FONT: 10pt arial"><B>To:</B> <A =
title=3DOPLINTECH@oplin.org=20
  href=3D"mailto:OPLINTECH@oplin.org">OPLINTECH@oplin.org</A> </DIV>
  <DIV style=3D"FONT: 10pt arial"><B>Sent:</B> Thursday, August 04, 2005 =
4:52=20
  PM</DIV>
  <DIV style=3D"FONT: 10pt arial"><B>Subject:</B> [OPLINTECH] memory =
sticks</DIV>
  <DIV><BR></DIV>
  <DIV><FONT face=3DArial size=3D2>Can memory sticks carry viruses the =
same as cd's=20
  and floppys?&nbsp; Should we allow patrons to bring them in and use =
them in=20
  our machines?</FONT></DIV>
  <DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
  <DIV><FONT face=3DArial size=3D2>Barb</FONT></DIV>
  <DIV><FONT face=3DArial size=3D2><A=20
  =
href=3D"mailto:marshaba@olpin.org">marshaba@olpin.org</A></FONT></DIV></B=
LOCKQUOTE></BODY></HTML>

------=_NextPart_000_03B6_01C599C4.63713350--