Stop using USB in office computers
How can I define a GP so that users cannot use their USB Flash disks??
Software/Hardware used:
Software/Hardware used:
ASKED:
July 9, 2008 7:51 AM
UPDATED:
January 30, 2012 8:22 AM
Answer Wiki:
Hi Aspire,
Pls find the <a href="http://support.microsoft.com/kb/823732"> Link1 </a> <a href="http://support.microsoft.com/kb/555324"> Link2 </a> from Microsoft.
I hope this will for u
Thanks & Regards,
Vlvpk
*************************************
This might also be helpful:
http://labnol.blogspot.com/2006/07/how-employers-disable-usb-ports-how.html
The site also has a few other security issues that employers should be aware of.
=========
It is actually better to completely disable the USB port in your computer system to make sure any USB devices cannot be plugged in to the computer system. Using the group policy could sometimes create conflict that causes other programs and Windows features to stop working.
To see all answers submitted to the Answer Wiki: View Answer History.
I’m not a techie, but that looks like a very simple question which needs fuller explanation i.e. why do you want to do this in the first place? If you’re concerned about DPL (Data Leak Prevention), prepare yourself for a rocky ride as (a) it’s still a relatively new area and (b) the range of options – problems/solutions and vendors – is almost overpowering.
If DLP is an issue for you, or if you’re concerned about the introduction of unwanted material (malware, 3rd party IPR, media-rich files etc etc) then how do you know that you have a problem in the first place?
General advice I’ve seen seems to be (a) install something like DeviceWall (granular policies) to monitor what’s actually going on (b) develop an Acceptable Use Policy (AUP) and (c) implement and monitor your AUP.
Disabling USB ports disables any kind of USB device and this may not be what you (or your users or managers) intend or find acceptable.
At the other end of the scale, Cisco have a product which does everything which DeviceWall (and others do), plus can prevent emailing, printing, copying, save as from specified folder locations – so if you’re paranoid about your IPR leaving the builing, it’s possible to go into complete lock-down – you can even disable screen captures!!
Hope this help.