BitLocker USB Encryption - Per User?

[FN-GM]

Hi,

 

We are looking at using BitLocker to protect staff USB drives. However all the group policies to control this are all computer policies and not user policies. I only want it setup for staff. Has anyone managed to work around this please?

 

Thanks

Edited May 12, 2015 by FN-GM

[Arthur]

Could you allow BitLocker To Go for everyone, but prevent students from running the BitLocker Drive Encryption Wizard (BitLockerWizardElev.exe) with AppLocker?

[FN-GM]

We want to put the restriction on that makes USB drives read only when they are not encrypted for staff only. I have no issue with students encrypting if they want to, however I want them to read and write to drives that are not encrypted.

[AliG]

You have probably discovered the GPO settings do not exist for the user configuration. This document gives a work around which I have yet to try but looks like it would work.

 

How to Enable User-Based Control/Enforcement of BitLocker on Removable Data Drives - Ask Premier Field Engineering (PFE) Platforms - Site Home - TechNet Blogs

[mrforgetful]

How are you going to support staff who use a Mac at home and as such cannot open Bitlocker drives?

[AliG]

We don't support home computers

[FN-GM]

How are you going to support staff who use a Mac at home and as such cannot open Bitlocker drives?

 

They won't be able to use USB devices between home and school. It will be read only if they do not use bitlocker on schools computers. They will have to use the online Remote App to get to files if they have a mac.