does anyone have any idea how to prevent exe's being run from usb drives on rm cc3

[Oaktech]

I'm seeing entries of

 

"%somelocation%\filename-wildcard.extension"

 

nature in the path rules part of the management console and wondered if there was a way of adding usb drives to this regardless of drive letter?

[Jamo]

Not really, we have just added all possible drive letters from D to H I think!! It has covered most stuff!

[localzuk]

How about using USBDLM, and combine it with the usual tools. That way, USB sticks only appear as a certain letter and then you can control it as normal?

 

USB Drive Letter Manager - USBDLM

[Oaktech]

Ok, using USB drive letter manager is a non starter as we would have to roll it out everywhere, I've just added D, E, F :\*.exe to the deny list and we'll see how it goes.

[X-13]

wondered if there was a way of adding usb drives to this regardless of drive letter?

 

Nope. At least, not that I can see.

 

Without forcing specific drive letters for USB drives, you'll have to just use a few it could be.

 

D, E and F should be fine.

 

However. If the USB is using E, then D is in use... Which means you're blocking something which may actually be needed.

 

I would have a look at your drives and double check what letters are free.

[Oaktech]

on workstations D, E, F are not used for any fixed drives, admins are exempt from software restriction policy anyway, and staff should not be running exe either... so i think i'm OK. :0S