Question

Locked

GPO to only allow a specific brand of USB drive

By jeyer ·
I know there is a GPO to disable the abiity to use all USB storage devices, and it works great. But is there a setting where i can only allow a certain brand or type of USB storage device. Case in point. I want to only allow managers to write to a company approved 256bit encrypted USB drive, like the Kingston or Kanguru (which are DOD approved. Were using AD Win2003 servers, Thanks.

This conversation is currently closed to new comments.

2 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Answers

Collapse -

I'm using a product called DiskNet Pro from Checkpoint

by robo_dev In reply to GPO to only allow a speci ...

this can be configured to do exactly that.

DiskNet has a neat feature where it can force encryption to usb or CD/DVD writing. So if an exec has to take a CD to a meeting, it's encrypted, (and a copy of the util to decrypt gets written to the media).

With Windows 2K or XP you cannot get that granular with GPO, so you can only block/allow USB storage devices altogether.

With Vista you can select which hardware IDs you allow or deny, so you could do what you want, assuming your workstations are vista.

http://www.windowsecurity.com/articles/Control-USB-Devices-Group-Policy.html

Back to Networks Forum
2 total posts (Page 1 of 1)  

Related Discussions

Related Forums