GPO to only allow a specific brand of USB drive

By jeyer ·
I know there is a GPO to disable the abiity to use all USB storage devices, and it works great. But is there a setting where i can only allow a certain brand or type of USB storage device. Case in point. I want to only allow managers to write to a company approved 256bit encrypted USB drive, like the Kingston or Kanguru (which are DOD approved. Were using AD Win2003 servers, Thanks.

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Answers

Collapse -

I'm using a product called DiskNet Pro from Checkpoint

by robo_dev In reply to GPO to only allow a speci ...

this can be configured to do exactly that.

DiskNet has a neat feature where it can force encryption to usb or CD/DVD writing. So if an exec has to take a CD to a meeting, it's encrypted, (and a copy of the util to decrypt gets written to the media).

With Windows 2K or XP you cannot get that granular with GPO, so you can only block/allow USB storage devices altogether.

With Vista you can select which hardware IDs you allow or deny, so you could do what you want, assuming your workstations are vista.

Related Discussions

Related Forums