Should users be allowed to run their USB flash sticks? (Reader submission)

Unless there is an need for it, being an administrator I’d rather block it! they bring all  kind of viruses to my children (the servers). Besides, it would make information leeks more easier (in my workplace only the managers get an external E-mail accounts+ internet access, while slaves get a foot print on their butts).

Now, How we can block memory sticks without stopping other USB devices (Keyboard, mouse, printer…etc.)

FOR FREE?

Plain and Simple:

Windows Registry, All you have to do is run (regedit) then browse to

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsbStor

Disable usb storge: set the key (Start) to 4

Enable usb storge: set the key (Start) to 3

Too geeky for you? there are some free cool tool with GUI interface that can share your burden called

USB Drive Disabler :
http://www.intelliadmin.com/Downloads.htm

Also to enable/disable remotely USB Remote Drive Disabler (You need Admin privilage of course)

There are also similar ones to enable/disable CD and floppy.

Ohhh and one more thing: if you want to enable USB storage but only for reading (said to be working on WinXP SP2 only) then browse to:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\StorageDevicePolicies

then Right click > new > DWORD Value name it WriteProtect and give it a value of 1 for read only, 0 for Read/Write.

Thanks Mohamed Alreafi for the awesome email! What do you guys do to block or lock down USB devices?