Solved

USB GPO

Posted on 2011-09-27
4
373 Views
Last Modified: 2012-05-12
I have an exisiting GPO that is restricting all local drives on a per user basis. I would like to create a new GPO that allows ONLY copying from the USB device to a network share while restricitng all other local drives on the machine. Futher more I would also like to create a another GPO for copying from a network share to a USB device ONLY while restricting access to the local drives as well.

my DC is Windows Server 2003 R2 Standard Edition SP2 x86
0
Comment
Question by:dfahie
  • 2
  • 2
4 Comments
 
LVL 57

Expert Comment

by:Mike Kline
ID: 36716774
No native GPO settings that I've seen to do that via GPO.  You can restict/block USB like you've noted  http://social.technet.microsoft.com/wiki/contents/articles/active-directory-how-to-block-usb-devices-dsforum2wiki.aspx

You may have to investigate third party products that help with advanced endpoint security.

Thanks


Mike
0
 

Author Comment

by:dfahie
ID: 36717168
do you know of any off the top of your head?
0
 
LVL 57

Accepted Solution

by:
Mike Kline earned 500 total points
ID: 36717401
At my last job we used a product by Lumension  http://www.lumension.com/device-control-software/usb-security-protection.aspx

It was actually a product called Sanctuary by securewave but Lumension bought them.  Not sure if it could do what you wanted; but it was much better than built in GPOs for device control.  Search for endpoint security and you will fine more.  You will have to test any product to make sure it meets requirements.

Thanks

Mike
0
 

Author Closing Comment

by:dfahie
ID: 36717806
thank you
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Both MMF (multi-mode fiber) and SMF (single-mode fiber) are types of optical fiber that can aid in communication applications. These thin strands of silica or glass will allow communication to occur between devices. The transmission of light between…
Ever wondered why Windows 8 and 10 don't seem to accept your GPO-based software deployment while Windows 7 does? Read on.
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, just open a new email message. In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…

777 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question