GPO to restrict an OU to seeing / accessing flash drives only

[eyetea]

Hi all,

 

I haven't really had much experience using group policy etc so need a little help. We often let out our theatre, classrooms and a few other areas to external bookings - and several of these are regulars.

 

Is there a way to restrict the drives they can see to only flash drives (or any local drives is fine)?

 

Cheers,

 

J

[LP814]

Do you mean disallow the network shares?

 

Depends how you are deploying these drives. If deploying with GPO mapped drives this would be easy. If you were to have a username such as, I don't know, guest1 say, put them in there own group and have a drive policy separate for that group. Make sure any drives they NEED for stuff to run are added but with 'hidden' ticked and just don't map anything else?

[caffrey]

Fix the drive letters on USB drives by using USBDLM then do software restriction policies using GPO.

[jb2201]

Ideally if part of the infrastructure is used by the general public, you should setup a separate OU for these users and create a stand alone set of policies. We are attached to a Community area here and although they all use the same domain, their access is restricted through GPO's to basically create a whole set of separate shares.