Improve company productivity with a Business Account.Sign Up

x
?
Solved

USB GPO

Posted on 2011-09-27
4
Medium Priority
?
393 Views
Last Modified: 2012-05-12
I have an exisiting GPO that is restricting all local drives on a per user basis. I would like to create a new GPO that allows ONLY copying from the USB device to a network share while restricitng all other local drives on the machine. Futher more I would also like to create a another GPO for copying from a network share to a USB device ONLY while restricting access to the local drives as well.

my DC is Windows Server 2003 R2 Standard Edition SP2 x86
0
Comment
Question by:dfahie
  • 2
  • 2
4 Comments
 
LVL 57

Expert Comment

by:Mike Kline
ID: 36716774
No native GPO settings that I've seen to do that via GPO.  You can restict/block USB like you've noted  http://social.technet.microsoft.com/wiki/contents/articles/active-directory-how-to-block-usb-devices-dsforum2wiki.aspx

You may have to investigate third party products that help with advanced endpoint security.

Thanks


Mike
0
 

Author Comment

by:dfahie
ID: 36717168
do you know of any off the top of your head?
0
 
LVL 57

Accepted Solution

by:
Mike Kline earned 2000 total points
ID: 36717401
At my last job we used a product by Lumension  http://www.lumension.com/device-control-software/usb-security-protection.aspx

It was actually a product called Sanctuary by securewave but Lumension bought them.  Not sure if it could do what you wanted; but it was much better than built in GPOs for device control.  Search for endpoint security and you will fine more.  You will have to test any product to make sure it meets requirements.

Thanks

Mike
0
 

Author Closing Comment

by:dfahie
ID: 36717806
thank you
0

Featured Post

Building an Effective Phishing Protection Program

Join Director of Product Management Todd OBoyle on April 26th as he covers the key elements of a phishing protection program. Whether you’re an old hat at phishing education or considering starting a program -- we'll discuss critical components that should be in any program.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

With more and more companies allowing their employees to work remotely, it begs the question: What are some of the security risks involved with remote employees and what actions should we take to secure them?
BMC's Track-It! provides a plethora of tools to help keep your IT Help Desk running smoothly, including a work order system, inventory management, report generation, and much more.
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
If you're a developer or IT admin, you’re probably tasked with managing multiple websites, servers, applications, and levels of security on a daily basis. While this can be extremely time consuming, it can also be frustrating when systems aren't wor…

601 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question