FLOPLOCK.EXE - Utility to put DACLs on floppy drives A DACL is a Discretionary Access Control List. Putting a DACL on a floppy drive controls access to it, so that one could say the floppy drive is locked When FLOPLOCK.EXE has the floppy drives on a machine locked, members of the Administrators group have full access, and all others have no access Summary: There is no way to put a DACL on the floppy drives or on the COM ports with REGEDT32, or using the Control Panel or other part of the user interface. And there is no way to use the Win32 api to put a DACL on the floppy drives that survives reboots Floplock.exe, however, does put DACLs on the floppy drives, and these DACLs survive logoff/logon, that is, these DACLs are on the floppy drives until the next reboot or until you unlock them To use Floplock.exe, you must first install Floplock.exe as a service on every machine whose floppies you want locked. Then you must use the Control Panel on each machine to configure this service to start automatically (that is, start before someone logs on) To install Floplock.exe as a service, run the Instsrv.exe utility Type "Instsrv" to get the help text: In the case of this service: instsrv FloppyLocker c:\service\floplock.exe (note fully-qualified path name to .exe) instsrv FloppyLocker remove Then go to the Control Panel, use the Services applet to configure the FloppyLocker service. Pick the account it should Startup under (Administrator would be one good choice), and provide the correct password for that account Then reboot the machine, log on as Guest and try to access the floppy drives as a test You need not name the service FloppyLocker, that is, you may pick any name you like To unlock the floppy drives on the machine, you may use the server manager to remotely stop/start the FloppyLocker service. Note that you can only do this while logged on as an Administrator. Stopping the FloppyLocker service will unlock the floppies, restarting it will re-lock them If you would prefer that Floplock.exe have some other user interface, full source code is available on the Win32 SDK CD, in the \q_a\sd_flppy directory