Data Protection

[just fix it]

Is there a way to block users from copying data from shared network drives to
external drives or CD's? Would even settle for monitoring to log files to
track those users that attempt to take data off site. Or both would be great.

 

[Masterplan]

Hi,

You can disable writing to cds from group policy :
Administrative Template: System\ USER\ Windows Components\Windows Explorer
This will disable writing from Windows XP. If users have third party tools
installed, anyway admins must grant rights to users (from example from Nero
Burning Rights) to write files to cds.
To disable writing to usb mass storage devices, look here:
http://support.microsoft.com/kb/555324

Have a nice day!

"just fix it" wrote:

> Is there a way to block users from copying data from shared network drives to
> external drives or CD's? Would even settle for monitoring to log files to
> track those users that attempt to take data off site. Or both would be great.

 

[just fix it]

In the section regarding disabling writing to usb mass storage devices I have
read the link and it is my understanding that this .adm file would stop all
UPB ports. Would that not shut down all the usb printers, mice, keyboards
and monitor usb ports?

"Masterplan" wrote:

> Hi,
>
> You can disable writing to cds from group policy :
> Administrative Template: System\ USER\ Windows Components\Windows Explorer
> This will disable writing from Windows XP. If users have third party tools
> installed, anyway admins must grant rights to users (from example from Nero
> Burning Rights) to write files to cds.
> To disable writing to usb mass storage devices, look here:
> http://support.microsoft.com/kb/555324
>
> Have a nice day!
>
> "just fix it" wrote:
>
> > Is there a way to block users from copying data from shared network drives to
> > external drives or CD's? Would even settle for monitoring to log files to
> > track those users that attempt to take data off site. Or both would be great.

 

[Masterplan]

Hi again,

I have applied this template long time ago. You have the obtion to disable
only mass storage devices, not all usb devices. Test it on an ou and see the
results. But it will not monitor anything.

Have a nice day!

"just fix it" wrote:

> In the section regarding disabling writing to usb mass storage devices I have
> read the link and it is my understanding that this .adm file would stop all
> UPB ports. Would that not shut down all the usb printers, mice, keyboards
> and monitor usb ports?
>
> "Masterplan" wrote:
>
> > Hi,
> >
> > You can disable writing to cds from group policy :
> > Administrative Template: System\ USER\ Windows Components\Windows Explorer
> > This will disable writing from Windows XP. If users have third party tools
> > installed, anyway admins must grant rights to users (from example from Nero
> > Burning Rights) to write files to cds.
> > To disable writing to usb mass storage devices, look here:
> > http://support.microsoft.com/kb/555324
> >
> > Have a nice day!
> >
> > "just fix it" wrote:
> >
> > > Is there a way to block users from copying data from shared network drives to
> > > external drives or CD's? Would even settle for monitoring to log files to
> > > track those users that attempt to take data off site. Or both would be great.