Forum
Topic: «Stop application from being able to write to CD/DVD», Applications are still able to write to CD/DVD
« Previous topic | Next topic »
|
Bart Wybouw
User profile Posts: 5 Joined: 10/01/2008 |
Hi,
I'm trying to create a user on a Windows XP Pro SP3 system, which has 1. Access to only his home directory 2. No possibility to write to CD/DVD/USB etc. 3. Only application to use is Picasa (google). Now, I've been able to lock down the user pretty much (nothing can be accessed via the explorer), but Picasa is still able to wrtie CD/DVD's. Any idea why Devicelock is not blocking that access ? Kindest regards, Bart |
| Posted: 10/01/2008 18:39:06 | |
|
Roman Gaditskiy
Guest |
Are you sure you set restrictions for this user in CD/DVD ACL?
What version of DeviceLock do you use? |
| Posted: 10/02/2008 00:07:49 | |
|
Bart Wybouw
User profile Posts: 5 Joined: 10/01/2008 |
Hi Roman,
I was expecting to get some kind of notification that this topic was updated, hence the delay. At the installation time , I have specified that CD/DVD should be locked. (lock devices window). I also tried to follow the procedure in the appendix on p206. I'm using the latest version (just downlaoded 3 days ago or so). The user is locked down. I can't burn a CD/DVD using the explorer, but Picasa2 is still able to burn CD's via the built in CD-burning function. Kindest regards, Bart |
| Posted: 10/03/2008 14:32:51 | |
|
Pavel Yusov
Technical Support Engineer Editor User profile Posts: 904 Joined: 07/02/2008 |
You should install consoles and check how CD/DVDs are locked, what permissions are set for SYSTEM account and for user accounts.
If it does not help, search console for audit settings and set full audit for all users, audit allow and audit denied. After that burn a CD with picasa and see what records are there in Audit Log. |
| Posted: 10/03/2008 14:41:33 | |
|
Bart Wybouw
User profile Posts: 5 Joined: 10/01/2008 |
OK, let me check using the auditing. |
| Posted: 10/03/2008 15:09:55 | |
|
Bart Wybouw
User profile Posts: 5 Joined: 10/01/2008 |
System is set to read only, only one user has write and eject access.
I did not find how I can set "full audit for all users", any pages in the manual you can refer me to ? Thanks |
| Posted: 10/03/2008 16:16:41 | |
|
Ekaterina Vavilova
Technical Support Engineer Editor User profile Posts: 568 Joined: 06/27/2007 |
System should have Full Access.
You can find instructions on how to set Full Audit in User Manual (ch. 5.4.2.2). |
| Posted: 10/03/2008 18:49:15 | |
|
Bart Wybouw
User profile Posts: 5 Joined: 10/01/2008 |
Hi,
activated auditing ... the funny thing is, I do see read access being blocked but I see nothing being reported on the write access. The user is reporting the access by Picasa2. But again, only the read access. Any further suggestions? |
| Posted: 10/06/2008 18:29:08 | |
|
Roman Gaditskiy
Guest |
Ok, we will try to reproduce the issue. For this you should tell us your system an the exact version of Picasa. |
| Posted: 10/06/2008 20:16:26 | |
|
davidm
Editor User profile Posts: 77 Joined: 06/30/2006 |
Check to see that the OS is using default Windows CD/DVD drivers and not those from third party software. |
| Posted: 11/05/2008 02:49:20 |
Stay in contact with us through:
