Meanwhile, blocking USB can prove to be time intensive if you don’t know what you’re doing. We’ve provided steps below for doing just that on Windows 10, Mac, and Ubuntu 18.04. How to Disable USB Storage on Windows. Blocking USB storage on a Windows computer is straightforward. ![]() Hi All, We have a request from an internal manager that for security reasons they would like to know the best way to control people plugging in random USB devices? They would either like. -Pre-approved USB only to work on the workstations or -Password protected USBs only to work on the workstation Environment is Windows SBS – 2011 - as the Domain Controller Windows 7 and upwards for the workstations Any software recommendation is also appreciated. P.s I am familiar with the GPO scripts that can disable all USB storage drives from working on the PCs but they don’t like this route. ![]() @ Rubicon4115 - There is actually two ways of doing what you are wanting, I've done them both, having worked for a pig headed management staff too. Here are your options. • Disable driver installation - By far the cheap & easy fix, like adding ducktape to a leaking boat, but it does work if your security is in place. It only works though given your users don't have admin rights, and you don't have a lot of people bringing in devices all the time. This can be a bit of a help-desk / complainant dept thing, but then again, you don't get something for nothing, this is a free choice after all, and it lets them keep drives that are already installed before you make the GPO change. It will stop the drives themselves from ever being usable on the machines, unless someone is sneaky enough to bring in that exact model flash drive. • Software solution - The professional way & expensive way, SecRMM made by Squada Technologies. Screen recorder for mac. Click 'Stop' button once you finish the screen recording. Then you can preview and export the recorded video to save. Also the makers of the awesome enterprise friendly self encrypting hard drives & flash drives. Not cheap, but does give you a ton of flexibility in a enterprise environment, and security that you want, including authorizing only what drives you want, disable / enable ports, and writing to the windows event log of what data goes to what device (software records both the user, and the SID of the device it went to). Again, this all depends on how well you can convince them that you need budget to do this, given that it just happened, it's best to use this exact reason. And re enforce your idea to get them thinking. 'I told you this would happen. But I do have a solution' Don't stand on the soapbox about how you were right, but use this as a case study to show WHY you need to have a solution in place, and use it to your advantage. It all depends on how worried they are, if they are very worried, then you can probably talk them into getting at least something like SecRMM, or banning media all together, but it will definitely get them thinking. I can't stress the explanation of why enough, no management wants to hear I told you so, you just have to say it in a nice & polite way that's Dale Carnegie approved. Rubicon4115 wrote: Thank you, I was thinking something along those same lines. One idea I had was to just turn off everyone's USB port except my own and if they wanted a file they would just file a request.but that would be a lot more headache. This is what I did, and to be honest, it has not been that big of a headache like I thought it would be. I block USB drive access through Trend Micro and when someone inserts a drive into their computer, I get an email alert, and I can view the contents of the drive in the report. I keep waiting for phone calls, but it has not happened, because when viewing the report of the files trying to be accessed, it is mostly their children's homework assignments and in one instant a list of chores for their significant other to get done, I have really yet to run into anything work related.
0 Comments
Leave a Reply. |