litmic
asked on
How to disable usb reading and cd burning function by windows 2003 DC server group policy to all client pc?
How to disable usb reading and cd burning function by windows 2003 DC server group policy to all client pc?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
USB drives inherit permission from .inf file that has driver inside.
CD write cannot be easily disabled (you can disable wmplayer writer, but any other writing application will ignore GPO)
Dedicated data thief can boot their flash hard drive and dump your data there, no usb, no cd, no trails.
CD write cannot be easily disabled (you can disable wmplayer writer, but any other writing application will ignore GPO)
Dedicated data thief can boot their flash hard drive and dump your data there, no usb, no cd, no trails.
ASKER
- disable the client pc USB access
- disable the client pc CD/DVD writer burning function, only allow CD/ DVD read function.