+ Post New Thread
Results 1 to 4 of 4
Windows Thread, USB block Advise please in Technical; Hi USB is open to all students and teachers and we don't have any encryption methods in place for the ...
  1. #1
    lionsl2005's Avatar
    Join Date
    Nov 2008
    Location
    Barnet
    Posts
    533
    Thank Post
    373
    Thanked 23 Times in 22 Posts
    Rep Power
    16

    USB block Advise please

    Hi

    USB is open to all students and teachers and we don't have any encryption methods in place for the USB.
    what is your advise on Blocking USB for students and teachers. how do you do it in your school. is there any legal / Ofsted requirements.

    We have Citrix Virtual desktop access for the students and teachers.

    Thanks

  2. #2

    Join Date
    Mar 2010
    Location
    shadowx@AllEvil:/
    Posts
    222
    Thank Post
    12
    Thanked 28 Times in 25 Posts
    Rep Power
    13
    We dont and I personally wouldn't want to.

    All staff sign AUPs and have policies in place to either prevent them taking confidential data outside the school (by any means) or to ensure that it's encrypted. Failure to do that = goodbye.

    As for students I dont know what you'd gain. Arguably you make the system more secure as there are less ways for malware to get into the system but in reality a properly configured student account with permissions would prevent 99.9% of malware getting beyond that users AppData/Home folders. Given the correct permissions it would be unable to install itself to the machine or spread through the network. At worst it runs until the machine is rebooted at which point RAM is cleared and it's gone. In terms of confidential data, the kids shouldn't have anything confidential on the school network.

    Personally I think blocking USBs makes things harder, particularly for the students who may want to do work at home. Even if you have a way for them to access stuff from home it's never ideal. If you use a microsoft solution it likely requires the student to have Windows at home, if you go for something web based it's usually a lot slower, a lot more difficult and a lot more awkward. If you are relying on email attachments you have malware issues anyway and it's also slower and more awkward than a USB. You're also teaching the kids vendor lock-in if it's vendor specific and bad practices (IE, dont backup your stuff to a USB because you cant, lulz).

    A better solution is to either educate all users (mostly staff) or provide encrypted USBs to staff and enforce their use from management down. Failure to secure data is a breach of professional standards as well as the law (DPA) and thus you're out. If in doubt, dont copy it.

  3. Thanks to shadowx from:

    lionsl2005 (10th December 2013)

  4. #3

    Join Date
    May 2010
    Posts
    1,017
    Thank Post
    105
    Thanked 76 Times in 62 Posts
    Rep Power
    47
    I use usbdlm here and assign certain drive letters, then file restriction policies on those drive letters.

  5. Thanks to caffrey from:

    lionsl2005 (10th December 2013)

  6. #4

    Join Date
    Mar 2010
    Location
    shadowx@AllEvil:/
    Posts
    222
    Thank Post
    12
    Thanked 28 Times in 25 Posts
    Rep Power
    13
    +1 to usbdlm, though we dont use file restrictions but probably should now I think about it...

  7. Thanks to shadowx from:

    lionsl2005 (10th December 2013)

SHARE:
+ Post New Thread

Similar Threads

  1. USB Blocking
    By iswar_74 in forum Network and Classroom Management
    Replies: 0
    Last Post: 6th April 2012, 07:35 AM
  2. Replies: 5
    Last Post: 21st August 2011, 02:48 PM
  3. Mac/Windows Networking NAS, X Server, Win 2008 ? Advise please
    By Shorty in forum Network and Classroom Management
    Replies: 0
    Last Post: 10th May 2011, 03:31 PM
  4. Advise please about a dispute
    By Jiser in forum General Chat
    Replies: 22
    Last Post: 28th April 2008, 10:37 PM
  5. projector advise please!
    By chrbb in forum Hardware
    Replies: 1
    Last Post: 14th September 2006, 08:11 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •