block thumb drives?

cadnyc
cadnyc used Ask the Experts™
on
we have a SMB law firm with only 5 employees, i was asked if we can block thumb drives/external drives from copying data to. reading thumb drivers is fine, but we want to prevent users from copying data from the server to their personal thumb drivers.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Change this registry key on a test machine. This should do the trick. Please reboot after making the change.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\StorageDevicePolicies]
"WriteProtect"=dword:00000001
Most Valuable Expert 2011
Top Expert 2011

Commented:
Or disable the Removable Storage service via gpo.....
Most Valuable Expert 2011
Top Expert 2011

Commented:
Never mind got sidetracked by the kids reading it through....
Most Valuable Expert 2011
Top Expert 2011

Commented:
Do you also block webmail? That's another aspect to consider, when trying to prevent data from leaving...

Author

Commented:
we dont have a active directory/GPO. i already have employee monitoring software installed on the workstations, so I see when they are attaching files to their webmail. will the reg hack also disable usb for printers? i want to give them read access on their thumb drivers, but not write access. is this possible?
No, it shouldn't disable USB printing. Do you have a test machine you can try it on? I've seen it work!! But we print to IP printers so no real world testing of USB printing but they are not considered writable storage devices so I doubt very seriously it would effect them
Commented:
If not using active directory perhaps the instructions here can help.  Although I haven't tried them myself.  http://www.ampercent.com/enable-disable-write-access-usb-drive/6264/

Commented:
Sorry, my link is what Kenmcse1969 already mentioned.  

Author

Commented:
what if i dont have StorageDevicePolicies? do i create one in regedit??
Here is the complete guide...but yes, you have to create the entry.

http://www.mydigitallife.info/how-to-disable-write-access-to-usb-hard-disk-and-flash-key-drives/ 

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial