AD or Virus end point Based Solution

cur
cur used Ask the Experts™
on
our system consist of 500 clients based network and migrating to AD structure from the workgroup. My major issue is what is the  best way to block their application and external media from the PC level . most of the users accessing the internet by using external usb based dongle and end up with so many issues .

what is the best way to block this requirement from the virus software or AD policies
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Top Expert 2016
Commented:
cur

Author

Commented:
what is the more common practice in the market place on the application and usb based blocking ?  AD or virus
To prevent external media & virus best way is to configure domain & take all the client systems & users in to domain. they you have to create OU's as per your requirement then you can create GP to block USB Storage & many other policy to prevent all the systems from virus, hide drive, many other things.

For Virus it is recommended to have separate server with Good Antivirus server from which you can manager your systems centrally.
Ensure you’re charging the right price for your IT

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden using our free interactive tool and use it to determine the right price for your IT services. Start calculating Now!

cur

Author

Commented:
my question is what is best way to control the application and device control via AD GPO or virus software that have the same features . coz no point of applying same restriction on both the ways
To block USB & External media via GPO you can use below policy. this is the one of the best GPO to prevent user to control the application and device control.

http://www.grouppolicy.biz/2010/02/how-to-use-group-policy-to-disable-usb-drives-on-windows-xp/

also you can control devices from Symantec Endpoint protection.

http://www.symantec.com/connect/articles/how-block-or-allow-devices-symantec-endpoint-protection
cur

Author

Commented:
Can any one give me the GPO policy applicable order . I am in the process of applying GPO to my company  . I really want to know the structure
There are many GPO policy which you can implement.  So first of all you have to decide which policy you want to implement.

Yes You can apply USB policy as suggested in one of the solution on computer.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial