Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

USB GPO

Posted on 2011-09-27
4
Medium Priority
?
383 Views
Last Modified: 2012-05-12
I have an exisiting GPO that is restricting all local drives on a per user basis. I would like to create a new GPO that allows ONLY copying from the USB device to a network share while restricitng all other local drives on the machine. Futher more I would also like to create a another GPO for copying from a network share to a USB device ONLY while restricting access to the local drives as well.

my DC is Windows Server 2003 R2 Standard Edition SP2 x86
0
Comment
Question by:dfahie
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 57

Expert Comment

by:Mike Kline
ID: 36716774
No native GPO settings that I've seen to do that via GPO.  You can restict/block USB like you've noted  http://social.technet.microsoft.com/wiki/contents/articles/active-directory-how-to-block-usb-devices-dsforum2wiki.aspx

You may have to investigate third party products that help with advanced endpoint security.

Thanks


Mike
0
 

Author Comment

by:dfahie
ID: 36717168
do you know of any off the top of your head?
0
 
LVL 57

Accepted Solution

by:
Mike Kline earned 2000 total points
ID: 36717401
At my last job we used a product by Lumension  http://www.lumension.com/device-control-software/usb-security-protection.aspx

It was actually a product called Sanctuary by securewave but Lumension bought them.  Not sure if it could do what you wanted; but it was much better than built in GPOs for device control.  Search for endpoint security and you will fine more.  You will have to test any product to make sure it meets requirements.

Thanks

Mike
0
 

Author Closing Comment

by:dfahie
ID: 36717806
thank you
0

Featured Post

NEW Veeam Agent for Microsoft Windows

Backup and recover physical and cloud-based servers and workstations, as well as endpoint devices that belong to remote users. Avoid downtime and data loss quickly and easily for Windows-based physical or public cloud-based workloads!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Introducing Priority Question, our latest feature.
Files go missing when using DFS (Distributed File System) Replication and how to recover them and fix it.
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…

722 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question