Preventing flash drives, cd burning and usb hard drives on the network.
What group policy I should enable if I don't want the users to be able to use the CD burner, flash drives or an external hard drive on our network?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
"or more effectively: fill all USB ports with epoxy" ???
Let's see you do that when your talking 1000's or more PC's
Let's see you do that when your talking 1000's or more PC's
One by one...? will take a time i agree. The other side is manage each PC... by blocking all items put into the ports.
(On Linux: UsbGuard, and then one has to allow for some of the local hardware again...,
like touchpads, mouseknobs, touchscreens, Bluetooth, WiFi ... many of those on laptops are done through USB, and they need to be allowed with Vendor, productID and serial number, so per device specific).
So whatever way you look at it closing the USB gap(s) is a lot of work. Either with epoxy or with software configurations.
(On Linux: UsbGuard, and then one has to allow for some of the local hardware again...,
like touchpads, mouseknobs, touchscreens, Bluetooth, WiFi ... many of those on laptops are done through USB, and they need to be allowed with Vendor, productID and serial number, so per device specific).
So whatever way you look at it closing the USB gap(s) is a lot of work. Either with epoxy or with software configurations.
(An USB can also be a keyboard, mouse, network adapter, serial port etc.etc. and even all at once if needed.)
You could try to lookup "Rubber Ducky" usb stick and later developments.