block thumb drives?
we have a SMB law firm with only 5 employees, i was asked if we can block thumb drives/external drives from copying data to. reading thumb drivers is fine, but we want to prevent users from copying data from the server to their personal thumb drivers.
Or disable the Removable Storage service via gpo.....
Never mind got sidetracked by the kids reading it through....
Do you also block webmail? That's another aspect to consider, when trying to prevent data from leaving...
ASKER
we dont have a active directory/GPO. i already have employee monitoring software installed on the workstations, so I see when they are attaching files to their webmail. will the reg hack also disable usb for printers? i want to give them read access on their thumb drivers, but not write access. is this possible?
No, it shouldn't disable USB printing. Do you have a test machine you can try it on? I've seen it work!! But we print to IP printers so no real world testing of USB printing but they are not considered writable storage devices so I doubt very seriously it would effect them
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Sorry, my link is what Kenmcse1969 already mentioned.
ASKER
what if i dont have StorageDevicePolicies? do i create one in regedit??
Here is the complete guide...but yes, you have to create the entry.
http://www.mydigitallife.info/how-to-disable-write-access-to-usb-hard-disk-and-flash-key-drives/
http://www.mydigitallife.info/how-to-disable-write-access-to-usb-hard-disk-and-flash-key-drives/
[HKEY_LOCAL_MACHINE\SYSTEM
"WriteProtect"=dword:00000