disable symantec endpoint protection enable usb

You can modify this to totally disable the usb stack - you'll need to modprobe -r on ohci, xhci and ehci and any other prefixes to hci you can find. Firstly, you'll need to use this script to lock your screen secondly, this only disables usb storage devices #!/bin/sh Methods and or suggestions for Windows 7 and Linux would be great.

How do I disable unused USB ports etc when the computer is in 'locked' mode so that they can't just plug in and copy data from the hard drive? Any other precautions that I could take? Also it's unlikely they will walk off with the PC to do a thorough job of it. Obviously it's less likely they're going to open up the case and hot plug in something into the PCI bus to do it.

flatmate, colleague etc plugging in and copying data from the hard drive. My plan is to stop a casual attacker, e.g. Now I assume the data must also be readable if I'm not logged in either as they could plug a device into one of the USB ports and copy the unencrypted data on the hard drive partitions that are mounted. So the data is readable if you have access to the machine and know the password to log in.

However if I'm not there I usually don't bother dismounting the encrypted containers as it's time consuming to enter the long password to remount them each time. Now the data is encrypted on the hard drive with TrueCrypt. Lets say my PC & server is in an environment where a theoretical attacker has physical access to the machine while I'm not there.

Disable symantec endpoint protection enable usb