| Author | Messages | |
GuidoG
Posts:59
 | | 07/18/2008 8:07 AM |
| So you saw a problem using GP preference for device restrictions even for users that were not local admins? Can you elaborate?
Thanks,
Guido
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Stegall, Stuart-x
Sent: Tuesday, July 08, 2008 8:01 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Prevent access to USB disks and portable media drives
I'm only saying that I've found that they don't always apply 100%, some of it is users being local admin, but sometimes it's not related to that. I was, however, in this case specifically speaking of using GP Preferences to limit access to USB-Storage devices.
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Darren Mar-Elia
Sent: Tuesday, July 08, 2008 12:55 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Prevent access to USB disks and portable media drives
Stuart-
I'm curious what about GP Preferences doesn't work for you in practice? Not questioning it-just curious.
Darren
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Stegall, Stuart-x
Sent: Tuesday, July 08, 2008 10:50 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Prevent access to USB disks and portable media drives
Realistically you are better off using something like DeviceLock as GP Preferences just don't work 100% in practice. (DeviceLock is a commercial application.)
Stuart
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Brandon Shell
Sent: Tuesday, July 08, 2008 12:34 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Prevent access to USB disks and portable media drives
But arn't GP Preferences non-enforceable? I think of them as gentle suggestions to the user as to the way things should be configured.
On Tue, Jul 8, 2008 at 1:22 PM, Darren Mar-Elia <darren@sdmsoftware.com<mailto:darren@sdmsoftware.com>> wrote:
Ben-
Assuming these are not Vista-based systems (Vista provides this kind of restriction capability out of the box in GP) then you can use GP Preferences to restrict access to storage devices like these.
Darren
From: ActiveDir-owner@mail.activedir.org<mailto:ActiveDir-owner@mail.activedir.org> [mailto:ActiveDir-owner@mail.activedir.org<mailto:ActiveDir-owner@mail.activedir.org>] On Behalf Of WATSON, BEN
Sent: Tuesday, July 08, 2008 10:17 AM
Subject: [ActiveDir] Prevent access to USB disks and portable media drives
I have a requirement by a customer to prevent users from being able to use USB disks on their workstations as well as preventing access to any floppy drives, CD/DVD drives, etc. However, there will be a couple privileged users who will need to retain access to these devices.
I found a great article with a pre-built ADM template, however it is a computer based policy, and I require a user based policy.
Is anyone aware of a way to accomplish these using user-based policies?
Thanks,
~Ben
| | | |
|
|