我们公司目前正在推出经过授权的加密USB记忆棒.我们现在已经制定了IT政策,只允许公司批准的USB设备和可移动媒体连接到计算机,但是我想知道是否有任何方法可以将USB驱动器的使用限制在仅批准使用的设备上.理想情况下,如果可能,这将涉及组策略设置而不是第三方软件.
Device Management and Installation Step-by-Step Guide: Controlling Device Driver Installation and Usage with Group Policy
假设您的客户都是Vista或更好,您可以使用本指南将您公司正在部署的USB设备“白名单”并阻止其余部分.来自文章：
This step-by-step guide describes how you can control the installation and use of devices on the computers that you manage. In Windows Server® 2008 and Windows Vista® you can apply computer policy to:
- Prevent users from installing any device.
- Allow users to install only devices that are on an “approved” list. If a device is not on the list,then the user cannot install it.
- Prevent users from installing devices that are on a “prohibited” list. If a device is not on the list,then the user can install it.
- Deny read or write access to users for devices that are themselves removable,or that use removable media,such as CD and DVD burners,floppy disk drives,external hard drives,and portable devices such as media players,smart phones,or Pocket PC devices.
