Those plug seem like a nice idea. Definitely slow someone down. For the systems we sell where I work we do several things. Granted these are windows systems primarily.
One, these are workstation class systems, not typical Desktop systems. (HP XW4600 series currently) Two, the Systems once installed are generally locked under the desk in a cabinet that is part of the desk, but well ventilated. Three, The option in the bios for USB are disabled. Unless you have the key needed from step two you can't reset the bios. Four, Using Group Policy we disable the auto run and general removable media support. As well as many other restrictions. The Linux systems we sell are not Workstations, but rather PBXs. USB is not enabled at a kernel level. On Mon, May 19, 2008 at 6:23 AM, Nicholas Wheeler <[EMAIL PROTECTED]> wrote: >> Can't you secure these ports with software? >> >> BobLQ > > I think I've seen options in BIOS's for disabling USB ports, however > that's bios-dependent, and it's not too hard to short out the BIOS's > cmos anyways. I think the best solution is epoxy. :) > > -- > Nicholas Wheeler > Systems Administrator > > > -- > [email protected] > http://www.kernel-panic.org/cgi-bin/mailman/listinfo/kplug-list > -- [email protected] http://www.kernel-panic.org/cgi-bin/mailman/listinfo/kplug-list
