📎 AI Summary:
The thread discusses how to restrict access to removable media via Group Policy Objects (GPOs). Neemobeer suggests creating two GPOs—one to deny read/write access and another to override it for specific AD groups, emphasizing user configuration settings. ussnorway adds that local users might bypass GPO restrictions if they have physical access to the port, highlighting potential limitations of this approach. Overall, the conversation reflects practical advice on media access control with an acknowledgment of possible security bypasses.
The thread discusses how to restrict access to removable media via Group Policy Objects (GPOs). Neemobeer suggests creating two GPOs—one to deny read/write access and another to override it for specific AD groups, emphasizing user configuration settings. ussnorway adds that local users might bypass GPO restrictions if they have physical access to the port, highlighting potential limitations of this approach. Overall, the conversation reflects practical advice on media access control with an acknowledgment of possible security bypasses.
Solution
- Joined
- Jul 4, 2015
- Messages
- 8,995
Create two GPOs one set to deny read and write for removable media.
Create a second GPO that applies after the deny all that is targeted to a AD group and make sure the GPO settings are User config and not computer config.
Create a second GPO that applies after the deny all that is targeted to a AD group and make sure the GPO settings are User config and not computer config.
Solution
cedricworth25
New Member
- Joined
- Oct 6, 2021
- Messages
- 1
Thanks for answers!
