Windows Server Summit 2024
Mar 26 2024 08:00 AM - Mar 28 2024 04:30 PM (PDT)
Microsoft Tech Community
LIVE

GPO need for few security

Copper Contributor

hi,

 

is any one know how can I prevent user to copy data from USB storage and Disc drive. user can read data from removal disc but cant copy data to network drive.

 

thanks in advance

2 Replies

Two things in your Request:

 

GPO  to have the User not to write the USB devices, You canuse the below GPO settings to enforce that.

 

Create new GPO with the below settings

Computer Configuration --> Policies --> Administrative Templates --> System --> Removable Storage Access or
User Configuration --> Policies --> Administrative Templates --> System --> Removable Storage Access

-->Removable Disks:Deny Write Access ---> Enabled

 

For Network Drive Read access:

Please have only the read permissions provided to the  shared drive which solves the second question.

 

 

 

 

hi,
thanks for your reply but I want to prevent user to copy data from USB to their pc or network share.

any one have any idea?

ta,

Preyash