Allow read-only access only to files on a USB device with known types

Topic

New Reply

I would like restrict access in the whole of a domain to USB devices. The only access to be allowed would be read access to selected file types. (Basically music files .WAV, .MP3 etc), all write access and reading/executing files would be blocked, except for the allowed types.

I have looked at some tools like Ratool (Newsletter 19.11) but they do not do what I need.

Peter.

Reply | Quote

Replies

Please confirm which Windows version(s).

Reply | Quote

Currently a mixture of Windows 7 and Windows 10, in a Server 2019 domain.

Peter.

1 user thanked author for this post.

b

Reply | Quote

I know you can use Group Policy to block USB drive access for certain user groups, and also generally to restrict which filetypes are executable. But I’m not clear whether it’s possible to allow a few filetypes whilst restricting most, but only via a USB drive.

Reply | Quote

In native GP, even with the latest official ADMX updates, we can only restrict read/write on a per user basis, or read/write/executable on an entire client machine basis (all users on that workstation.)

As of yet, we don’t have a way to edit the list of executables.  There are third party addons, but none I am able to recommend here.

~ Group "Weekend" ~

2 users thanked author for this post.

plbplb, b

Reply | Quote