Lock floppy drives on Windows 2000 Pro machines with Floplock.exe
在使用Windows 2000 Pro的机器上用Floplock.exe锁住软驱
by Jim Boyce
作者：Jim Boyce
翻译：endurer
2005.12.26 第1版
Keywords: Windows 2000 | Microsoft Windows | Security threats | Data security
关键字：Windows 2000 | Microsoft Windows | 安全威胁 | 数据安全
Takeaway:
One Windows 2000 Resource Kit utility that can help you better secure your systems is Floplock.exe. Read this tip to find out how Floplock.exe makes your computers more secure.
概述：
Windows 2000 资源工具包中有助于使您的系统更安全的是Floplock.exe。阅读这篇提示，看看Floplock.exe如何使电脑更安全。
From the conception of the first computer virus, floppy disks have posed a very real security risk for computer users and IT managers alike. Although e-mail and Web browsing are often the distribution method of choice for today's viruses, floppy disks still pose a risk. In addition, the presence of removable devices such as floppy drives and writable CD/DVD drives increases the risk of data theft or misuse.
从第一个计算机病毒概念中，软驱为计算机用户和IT经理们等造成了一个很真实地安全风险。尽管对如今的病毒来说，e-mail和网页浏览是常用的散布方法，软盘仍然造成风险。另外，诸如软驱和可写CD/DVD驱动器之类的可移动设备的存在，增加数据被窃或滥用的风险。
《endurer注：1。in addition adv. 另外》
One Windows 2000 Resource Kit utility that can help you better secure your systems is Floplock.exe. (This tool runs as a Windows service.) When installed and running on a Windows 2000 Professional computer, Floplock.exe uses a discretionary access control list (DACL) to prevent access to the floppy disk. Only members of the Administrators and Power Users groups can use access the floppy disk. You can restore general access to the floppy disk by stopping the Floplock.exe service.
Windows 2000 资源工具包中能帮助您的系统更安全的是Floplock.exe。（这个工具作为Windows服务来运行。）在使用Windows 2000专业版的计算机上安装和运行时，Floplock.exe使用一个随机访问控制列表（discretionary access control list，DACL）来防止对软盘的访问。只有Administrators和Power Users用户组的成员可以使用软盘。你可以通过停止Floplock.exe服务来恢复对软盘的正常访问。
When you install the Resource Kit, it installs the Floplock.exe file to a system but it does not add it as a service. You can use the Instsrv.exe command-line tool or the Service Installation Wizard (both of which are included with the Resource Kit) to install Floplock.exe as a service (as well as remove it).
当您安装资源工具包时，它把Floplock.exe安装到系统中，但没有添加为服务。你可以使用Instsrv.exe命令行工具或Service Installation Wizard（服务安装向导）（它们都包含在资源工具包中）来把Floplock.exe安装为服务（也可以删除）。
For details on installing Floplock.exe as a service, see the Floplock.exe Help page in the Windows 2000 Resource Kit documentation.
关于把Floplock.exe安装为服务的详细信息，请看Windows 2000 资源工具包文档中的Floplock.exe的帮助页。