Note from the above screenshot that we can use Group Policy to limit access to the following device classes:īy far, the most restrictive restriction (pardon the redundancy) is the policy All Removable Storage Classes: Deny All Access. NOTE: If you prefer to set these restrictions on a per-user basis instead of computer-wide, then use the Group Policy path \User Configuration\Policies\Administrative Templates\System\Removable Storage Access. Within the Group Policy Editor, navigate to \Computer Configuration\Policies\Administrative Templates\System\Removable Storage Access. Now then: from one of your Active Directory Domain Services domain controllers or from an administrative workstation, open the Group Policy Management Console and link a new GPO to the appropriate target (domain, OU, etc.).
0 kommentar(er)
