Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

USB GPO

Posted on 2011-09-27
4
374 Views
Last Modified: 2012-05-12
I have an exisiting GPO that is restricting all local drives on a per user basis. I would like to create a new GPO that allows ONLY copying from the USB device to a network share while restricitng all other local drives on the machine. Futher more I would also like to create a another GPO for copying from a network share to a USB device ONLY while restricting access to the local drives as well.

my DC is Windows Server 2003 R2 Standard Edition SP2 x86
0
Comment
Question by:dfahie
  • 2
  • 2
4 Comments
 
LVL 57

Expert Comment

by:Mike Kline
ID: 36716774
No native GPO settings that I've seen to do that via GPO.  You can restict/block USB like you've noted  http://social.technet.microsoft.com/wiki/contents/articles/active-directory-how-to-block-usb-devices-dsforum2wiki.aspx

You may have to investigate third party products that help with advanced endpoint security.

Thanks


Mike
0
 

Author Comment

by:dfahie
ID: 36717168
do you know of any off the top of your head?
0
 
LVL 57

Accepted Solution

by:
Mike Kline earned 500 total points
ID: 36717401
At my last job we used a product by Lumension  http://www.lumension.com/device-control-software/usb-security-protection.aspx

It was actually a product called Sanctuary by securewave but Lumension bought them.  Not sure if it could do what you wanted; but it was much better than built in GPOs for device control.  Search for endpoint security and you will fine more.  You will have to test any product to make sure it meets requirements.

Thanks

Mike
0
 

Author Closing Comment

by:dfahie
ID: 36717806
thank you
0

Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

As a long-time IT Professional, the most important skill I have developed and consider to be my most valuable tool is Effective Troubleshooting. Step through my problem-solving procedure in this 10-step guide adapted from The Universal Troubleshooti…
Note: This is the second blog post in a series on email clearinghouses (https://www.xmatters.com/alert-management/blog-email-has-failed-us?utm_campaign=70138000000ydLoAAI&utm_source=exex&utm_medium=article&utm_content=blog-post).   Every month t…
Internet Business Fax to Email Made Easy - With  eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, f…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…

808 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question