Locking down workstations using Group Policy

  • Thread starter Thread starter Bob
  • Start date Start date
B

Bob

I would like to know how or if it is possible with group
policy to prevent users from installing hardware ie: USB
memory sticks, on their workstations and also what is the
best way of preventing users from copying data that they
use, off the network and taking it home with them.
 
You can disable USB natively in Group Policy without using any 3rd party
tools. The USB driver is called usbstor.sys, create a custom GPO template
that will disable this driver on all machines and that takes care of USB
storage.

That device lock software looks like it can do a lot more though, looks
interesting.
 
I would like to know how or if it is possible with group
policy to prevent users from installing hardware ie: USB
memory sticks, on their workstations and also what is the
best way of preventing users from copying data that they
use, off the network and taking it home with them.


See tip 7093 in the 'Tips & Tricks' at http://www.jsiinc.com

Jerold Schulman
Windows: General MVP
JSI, Inc.
http://www.jsiinc.com
 
Have a look at www.disknetpro.com.

Allows you to specifically authorise media for use, and then
transparently encrypt it if it is allowed to be used - and then audits
all file transfers to the media.

You might find it does all you want!

Paddy
 
Back
Top