Disable USB partially

  • Thread starter Thread starter Guillermo AG
  • Start date Start date
G

Guillermo AG

Hello

In our company we need to disable the access to the devices of storage USB,
but only partially.

I know that it is possible to disable totally or only the writing across the
regedit, but it is not for what we look.

We need that the manager's account has access to these devices (already
installed), but the user's accounts do not.


Thank you very much
 
Guillermo AG said:
Hello

In our company we need to disable the access to the devices of
storage USB, but only partially.

I know that it is possible to disable totally or only the writing
across the regedit, but it is not for what we look.

We need that the manager's account has access to these devices
(already installed), but the user's accounts do not.


Thank you very much
Click to expand...

If you have a Windows domain, this is something you could handle via group
policy. Try posting in microsoft.public.windows.group_policy for more help.
 
If your goal is to stop users from copying files, then blocking write access
to USB drives won't completely address your need. There are many ways that
people can export data, and determined users will try them all:

* Burning to CD/DVD
*Emailing to external webmail
* Printing
* Copying to an externally-accessible server, then obtaining from outside

What is the security risk you're trying to mitigate?
 
Back
Top