Solved

USB GPO

Posted on 2011-09-27
4
379 Views
Last Modified: 2012-05-12
I have an exisiting GPO that is restricting all local drives on a per user basis. I would like to create a new GPO that allows ONLY copying from the USB device to a network share while restricitng all other local drives on the machine. Futher more I would also like to create a another GPO for copying from a network share to a USB device ONLY while restricting access to the local drives as well.

my DC is Windows Server 2003 R2 Standard Edition SP2 x86
0
Comment
Question by:dfahie
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 57

Expert Comment

by:Mike Kline
ID: 36716774
No native GPO settings that I've seen to do that via GPO.  You can restict/block USB like you've noted  http://social.technet.microsoft.com/wiki/contents/articles/active-directory-how-to-block-usb-devices-dsforum2wiki.aspx

You may have to investigate third party products that help with advanced endpoint security.

Thanks


Mike
0
 

Author Comment

by:dfahie
ID: 36717168
do you know of any off the top of your head?
0
 
LVL 57

Accepted Solution

by:
Mike Kline earned 500 total points
ID: 36717401
At my last job we used a product by Lumension  http://www.lumension.com/device-control-software/usb-security-protection.aspx

It was actually a product called Sanctuary by securewave but Lumension bought them.  Not sure if it could do what you wanted; but it was much better than built in GPOs for device control.  Search for endpoint security and you will fine more.  You will have to test any product to make sure it meets requirements.

Thanks

Mike
0
 

Author Closing Comment

by:dfahie
ID: 36717806
thank you
0

Featured Post

Instantly Create Instructional Tutorials

Contextual Guidance at the moment of need helps your employees adopt to new software or processes instantly. Boost knowledge retention and employee engagement step-by-step with one easy solution.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Read about why it is more lucrative for an IT company to participate in government projects.
How many times a day do you open, acknowledge, or close an IT incident? What’s your process? Do you have a process depending on the incident, systems involved, and other factors? New Relic Alerts gives you options for how you interact with notifica…
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
Suggested Courses
Course of the Month6 days, 14 hours left to enroll

623 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question