Prevent connection of unauthorized USB-devices?

Is there a way to prevent connection of unauthorized USB-devices? We have Win 7 Pro clients today but will probably upgrade to 8.1 Pro soon. We are running a Windows Server 2008 R2 server enviroment.

I want to:
1. Configure which USB-devices that are allowed
2. Prevent connectivity of unauthorized USB-devices
3. Prevent file copy to and from devices other than authorized encrypted USB thumb drives
4. Only allow charge function when connecting a smartphone



to get this you should have an encryption system in your environment connected across all your system, and it takes long time than what you really think

the easy way to prevent non-allowed USB is to disable the USB port itself from the device manager and you need to input your credentials there as an administrator to enable them again.

there are several vendors providing SW like what you are looking for but as my experience it's very complicated to manage and not friendly use.



to get this you should have an encryption system in your environment connected across all your system, and it takes long time than what you really think

the easy way to prevent non-allowed USB is to disable the USB port itself from the device manager and you need to input your credentials there as an administrator to enable them again.

there are several vendors providing SW like what you are looking for but as my experience it's very complicated to manage and not friendly use.



Thank you. If I disable the USB-ports in BIOS can I enable connectivity on certain devices? We must be able to connect keyboard, mouse and authorized USB thumb drives.



For the requirements you have disableing the ports is not a solution.

Then you need special software to accomplish this.

Be aware that your users can bring an identical Thumbdrive (same brand, model and make) and this one will work too then. This kind of USB restriction software will usually look at device Vendor and ID and they are the same for the same product.



Ok. Is it possible to physically lock connected USB-devices like keyboard, mouse etc.?
If it is possible to disable the opportunity to save files from external devices and copy files to external devices via OS security that might be a better solution.



Locking ports can be done with this little thingy:
http://www.kensington.com/us/us/4483/k67720us/usb-port-lock-with-square-cable-guard#.VUiV1dS1Gko

Share this

Related Posts

Latest
There was an error in this gadget