Locking down workstations using Group Policy

[Bob]

I would like to know how or if it is possible with group
policy to prevent users from installing hardware ie: USB
memory sticks, on their workstations and also what is the
best way of preventing users from copying data that they
use, off the network and taking it home with them.

 

[Vladislav Artukov \(MCP\)]

i think - it is impossible

try it: http://www.protect-me.com/dl/

 

[Simon Geary]

You can disable USB natively in Group Policy without using any 3rd party
tools. The USB driver is called usbstor.sys, create a custom GPO template
that will disable this driver on all machines and that takes care of USB
storage.

That device lock software looks like it can do a lot more though, looks
interesting.

 

[Jerold Schulman]

I would like to know how or if it is possible with group
policy to prevent users from installing hardware ie: USB
memory sticks, on their workstations and also what is the
best way of preventing users from copying data that they
use, off the network and taking it home with them.

See tip 7093 in the 'Tips & Tricks' at http://www.jsiinc.com

Jerold Schulman
Windows: General MVP
JSI, Inc.
http://www.jsiinc.com

 

[Paddy]

Have a look at www.disknetpro.com.

Allows you to specifically authorise media for use, and then
transparently encrypt it if it is allowed to be used - and then audits
all file transfers to the media.

You might find it does all you want!

Paddy