Re: SOE Lockdown - Read only USB
From: AdL (antispam_at_dela-d.nl)
Date: 12/13/04
- Next message: Jago: "Re: GPO only applied if user account within OU container"
- Previous message: AdL: "Re: GPO only applied if user account within OU container"
- In reply to: Stuartbaby: "SOE Lockdown - Read only USB"
- Messages sorted by: [ date ] [ thread ]
Date: Mon, 13 Dec 2004 14:56:03 +0100
Hi Stuartbaby,
What you could do is hiding all drive letters, except for the ones that are
always set and known by you.
This way, if a user plugs in a USB stick, the drive letter that it maps to
will never be visible. Following up on that you may also want to deny access
to these hidden drive letters.
This option is set in a GPO under User Configuration|Administrative
Templates|Windows Components|Windows Explorer > "Hide these specified drives
in My Computer". Denying access is done through "Prevent access to drives
from My Computer".
To specify other letters than the ones supplied by default, please follow
this KB article: 231289.
Regards, Arjan.
"Stuartbaby" <Stuartbaby@discussions.microsoft.com> wrote in message
news:BB22A3EE-7226-4552-9BA9-DCC0AD4DF6DA@microsoft.com...
> Hi All,
>
> I work in an environment where data is very sensitive. We are just working
> on our Win XP sp2 SOE image and would like to stop people from being able
> to
> copy data onto USB keys. Is there a way to make USB devices read only by
> default when inserted onto one of our SOE imaged machines? If so can it be
> restricted to groups or can I set up an override group for people with
> valid
> reasons for wanting to do this?
>
> I would appreciate as much detail as possible....
>
> Thanks,
> Stuart.
>
- Next message: Jago: "Re: GPO only applied if user account within OU container"
- Previous message: AdL: "Re: GPO only applied if user account within OU container"
- In reply to: Stuartbaby: "SOE Lockdown - Read only USB"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
