Solved

Flash drive access restiction

Posted on 2014-04-15
1
287 Views
Last Modified: 2014-04-24
What is the best way to deny access to company data copying and moving out?
I have two options. AD policy based or virus control based solution.
I need the flexibility to enable and disable the external drivers if needed. Some of the HODs need to have some flexibility on the file copying and moving, but we don’t want to have that flexibility as a security loop hole. Please give me your idea on above implementation.  Is there any other way of going forward on this (Best practice)
0
Comment
Question by:cur
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 10

Accepted Solution

by:
Scott Thomson earned 205 total points
ID: 40003172
I would say you can go with this option

http://support.microsoft.com/kb/823732

Assign all users into this group by default. and then you can take them out of this group if you want them to have access.
That way the drivers cannot install.

********************************************

This is also a simple method

http://www.redmondpie.com/disable-usb-storage-in-windows-8-7-how-to-guide/

***********************************************
0

Featured Post

Increase Agility with Enabled Toolchains

Connect your existing build, deployment, management, monitoring, and collaboration platforms. From Puppet to Chef, HipChat to Slack, ServiceNow to JIRA, Splunk to New Relic and beyond, hand off data between systems to engage the right people.

Connect with xMatters.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

VM backup deduplication is a method of reducing the amount of storage space needed to save VM backups. In most organizations, VMs contain many duplicate copies of data, such as VMs deployed from the same template, VMs with the same OS, or VMs that h…
This article aims to explain the working of CircularLogArchiver. This tool was designed to solve the buildup of log file in cases where systems do not support circular logging or where circular logging is not enabled
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…
This tutorial will walk an individual through the process of installing of Data Protection Manager on a server running Windows Server 2012 R2, including the prerequisites. Microsoft .Net 3.5 is required. To install this feature, go to Server Manager…

691 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question