|
DrewE -> RE: Give users Read-only USB access (21.May2008 11:56:15 AM)
|
Please keep in mind the following:
- Most USB drives show up in GFI EndPointSecurity as Storage Devices. We need to ensure that the software is controlling storage devices first.
- They are also interfacing with the operating system using USB ports, so we need to ensure our software is controlling USB ports.
Once the software has control of the necessary ports and devices, we can continue adding permissions. Typically, I like to do this from the 'User view' Once you open the protection policies 'security' section, you'll see some common tasks on the left hand side of the interface. Make sure you see 'Switch to Device View' and not 'Switch to User View'
Here you can add permissions for specific users (or active directory groups.) The permissions you are looking to add are for 'Storage Devices' with Read Only Access, and USB ports with Full Access.
Also, the priority the devices get listed at can determine if the permissions are applied successfully. Storage devices needs to have a higher priority than USB ports in order for this type of access control to work.
|
|
|
|