Tell me more ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.
up vote 1 down vote favorite

How do I prevent access to the DVD drive and USB ports in Windows 7 unless an admin password is entered?

Also, if I could, I would like users to connect an Apple iPod without needing to enter a password (but not for any other device).

share|improve this question

2 Answers

up vote 0 down vote

Remove the DVD drive and physically destroy the USB ports. No, seriously. If a bad guy has unrestricted physical access to your computer, it's not your computer anymore.

share|improve this answer
Also, it's impossible for Windows to tell whether the device is an iPod until it's too late. – kinokijuf Dec 25 '11 at 14:22
1  
While the answer is technically true, it doesn't really help the original poster. There are several reasons for an admin to disable USB/DVD ports even though there's a possibility of someone exploiting them with a specially tailored hardware. – Mavrik Dec 25 '11 at 15:08
As I said it's impossible. – kinokijuf Dec 25 '11 at 15:09
up vote 0 down vote

You'dd need to write an utility for this.. The utility should also be smart enough to connect with the iPod and verify if it's the iPod you intended. But I'm not sure if its a 100% possible because W7 actually would have to be injected with a kind of "malicious" code that can alter the W7 driver management...

This is my flowchart I'dd use in code: The utility is active in any W7 mode. Then it 'knows' at any time if there are Administrator rights.. It blocks all acccess constantly, unless the necessary conditions are met.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.