Sophos updating policy awaiting policy transfer

02-Oct-2015 14:59 by 2 Comments

Sophos updating policy awaiting policy transfer - Sex Chat

When you consider security, protection of the network, protection of corporate data, or similar issues like this on your corporate network, you must think about how to control USB thumb drives and hard drives.

However, Microsoft has come to the rescue by adding Device Installation Restrictions to control USB devices on Windows Vista.For those that do not have Windows Vista yet, or want to verify the process of controlling the installation of USB devices on Windows 2000 or Windows XP, I wanted to throw in the capabilities that you do have for these operating systems. To deny the installation of the USB devices, you need to modify the security on each file.This process allows you to control USB devices, but not nearly as easy to deploy or control compared to the new option by controlling USB drives using Group Policy. To modify the security of each file, right-click on the file, then select Properties. Then, select the groupname that the user(s) belongs to (of which you want to deny installation of USB drives) and then select the Deny- Full Control permission, as shown in Figure 1.For Windows 2000 and XP you will need to modify the permissions of existing files to restrict the installation of USB drives. Figure 1: Configure the groupname to have Deny permissions of Full Control for both files For Windows Vista computers you can use a Group Policy object setting to deny the installation of USB drives.A similar scenario would be that you have a USB drive that you want to restrict, which has not been installed on the computer before, even though a different USB drive has been installed.In this case, the USB drive that you want to control has never been installed, so you can still control the installation of the USB drive and its driver.

The second scenario is when the USB drive has already been installed.

In this scenario the USB drive has been configured in the registry and the associated driver has been copied to the computer.

These settings are easy to configure, control, and are very powerful as they are deployed using Group Policy.

Before we can investigate the options and steps needed to restrict USB drives, we must break down USB drives into two different scenarios.

The first scenario is quite simple as it deals with a computer that has never seen a USB drive before.

In an instance like this the computer does not have any USB drives installed.