Securing Network Access to CD-ROM Drives

Posted On 2007-05-03 by FortyPoundHead
Keywords: Securing Network Access to CD-ROM Drives
Tags:  Windows NT Windows 2000
Views: 1611

This setting determines whether data in the CD-ROM drive is accessible to other users. This value entry satisfies, in part, the C2 security requirement that you must be able to secure removable media.
Because the CD-ROM drive is a volume, by default, it is shared as an administrative share on the network. If the value of this entry is 1, the CD-ROM drive is allocated to the user as part of the interactive logon process and, therefore, only the current user can access it. This prevents administrators and remote users (and even the same user at a different workstation) from accessing the drive while the current user is logged on to the computer. The drive is shared again when the current user logs off the computer.
Value Meanings:
'0' = Compact discs in the CD-ROM drive can be accessed by all administrators in the domain.
'1' = Only the user logged on locally can access data on the compact discs in the CD-ROM drive.

Key: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
Value Name: AllocateCDRoms
Data Type: REG_SZ
Data: (0 = enabled, 1 = disabled)

More Info:

About the Author

FortyPoundHead has posted a total of 1974 articles.

Comments On This Post

No comments on this post yet!

Do you have a thought relating to this post? You can post your comment here. If you have an unrelated question, you can use the Q&A section to ask it.

Or you can drop a note to the administrators if you're not sure where you should post.

Your IP address is:

Before you can post, you need to prove you are human. If you log in, this test goes away.

Code Links