Disable USB partially

G

Guillermo AG

Hello

In our company we need to disable the access to the devices of storage USB,
but only partially.

I know that it is possible to disable totally or only the writing across the
regedit, but it is not for what we look.

We need that the manager's account has access to these devices (already
installed), but the user's accounts do not.


Thank you very much
 
L

Lanwench [MVP - Exchange]

Guillermo AG said:
Hello

In our company we need to disable the access to the devices of
storage USB, but only partially.

I know that it is possible to disable totally or only the writing
across the regedit, but it is not for what we look.

We need that the manager's account has access to these devices
(already installed), but the user's accounts do not.


Thank you very much

If you have a Windows domain, this is something you could handle via group
policy. Try posting in microsoft.public.windows.group_policy for more help.
 
S

Steve Riley [MSFT]

If your goal is to stop users from copying files, then blocking write access
to USB drives won't completely address your need. There are many ways that
people can export data, and determined users will try them all:

* Burning to CD/DVD
*Emailing to external webmail
* Printing
* Copying to an externally-accessible server, then obtaining from outside

What is the security risk you're trying to mitigate?
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top