Guest just fix it Posted July 3, 2008 Posted July 3, 2008 Is there a way to block users from copying data from shared network drives to external drives or CD's? Would even settle for monitoring to log files to track those users that attempt to take data off site. Or both would be great. Quote
Guest Masterplan Posted July 3, 2008 Posted July 3, 2008 Hi, You can disable writing to cds from group policy : Administrative Template: System\ USER\ Windows Components\Windows Explorer This will disable writing from Windows XP. If users have third party tools installed, anyway admins must grant rights to users (from example from Nero Burning Rights) to write files to cds. To disable writing to usb mass storage devices, look here: http://support.microsoft.com/kb/555324 Have a nice day! "just fix it" wrote: <span style="color:blue"> > Is there a way to block users from copying data from shared network drives to > external drives or CD's? Would even settle for monitoring to log files to > track those users that attempt to take data off site. Or both would be great.</span> Quote
Guest just fix it Posted July 3, 2008 Posted July 3, 2008 In the section regarding disabling writing to usb mass storage devices I have read the link and it is my understanding that this .adm file would stop all UPB ports. Would that not shut down all the usb printers, mice, keyboards and monitor usb ports? "Masterplan" wrote: <span style="color:blue"> > Hi, > > You can disable writing to cds from group policy : > Administrative Template: System USER Windows ComponentsWindows Explorer > This will disable writing from Windows XP. If users have third party tools > installed, anyway admins must grant rights to users (from example from Nero > Burning Rights) to write files to cds. > To disable writing to usb mass storage devices, look here: > http://support.microsoft.com/kb/555324 > > Have a nice day! > > "just fix it" wrote: > <span style="color:green"> > > Is there a way to block users from copying data from shared network drives to > > external drives or CD's? Would even settle for monitoring to log files to > > track those users that attempt to take data off site. Or both would be great.</span></span> Quote
Guest Masterplan Posted July 4, 2008 Posted July 4, 2008 Hi again, I have applied this template long time ago. You have the obtion to disable only mass storage devices, not all usb devices. Test it on an ou and see the results. But it will not monitor anything. Have a nice day! "just fix it" wrote: <span style="color:blue"> > In the section regarding disabling writing to usb mass storage devices I have > read the link and it is my understanding that this .adm file would stop all > UPB ports. Would that not shut down all the usb printers, mice, keyboards > and monitor usb ports? > > "Masterplan" wrote: > <span style="color:green"> > > Hi, > > > > You can disable writing to cds from group policy : > > Administrative Template: System USER Windows ComponentsWindows Explorer > > This will disable writing from Windows XP. If users have third party tools > > installed, anyway admins must grant rights to users (from example from Nero > > Burning Rights) to write files to cds. > > To disable writing to usb mass storage devices, look here: > > http://support.microsoft.com/kb/555324 > > > > Have a nice day! > > > > "just fix it" wrote: > > <span style="color:darkred"> > > > Is there a way to block users from copying data from shared network drives to > > > external drives or CD's? Would even settle for monitoring to log files to > > > track those users that attempt to take data off site. Or both would be great.</span></span></span> Quote
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.