Shulou(Shulou.com)06/01 Report--

This article shows you how to set removable storage access in Windows 2008. The content is concise and easy to understand. It will definitely brighten your eyes. I hope you can get something through the detailed introduction of this article.

Group policy plays an important role in ensuring the security of the system, and removable storage devices often threaten the security of the system. This paper introduces how to use the group policy in windows 2008 to set the access of removable storage devices.

In Windows Server 2008, administrators can apply group policies to control whether users can read or write to any device that uses removable media. These policies can be used to help prevent sensitive or confidential materials from being written to removable media or removable devices that contain storage areas.

This policy setting can be found in two locations. The policy settings found in computer configuration\ Administrative templates\ system\ removable Storage access affect the computer and every user who logs in to the computer. The policy settings found in user configuration\ Administrative templates\ system\ removable Storage access affect only the users to whom the policy settings are applied, including groups (if group policies are applied using Active Directory).

Each device category supports two policies: one is to deny read permission, and the other is to deny write permission:

-the time (in seconds) to enforce the restart. Sets the amount of time (in seconds) to wait to restart the system in order to enforce changes to access to removable storage devices. A restart is enforced only if the restriction policy cannot be applied without a reboot.

-CD and DVD. These policy settings allow you to deny read or write access to devices in the CD and DVD removable storage classes, including devices connected through USB.

Example:

(1) preparatory work

-the client computer running Windows Vista. Suppose it is DMI-Client.

-USB storage drive. The scenario described in this guide uses a USB storage drive as a sample device. This device is like a removable disk drive, which is also known as a "thumb drive", "flash drive", or "keyring drive". Most USB storage drives do not require any drivers provided by the manufacturer, and these devices use drivers provided by Windows Server 2008.

II) use the device manager to find the device identification string

1. Log in to the computer as DMI-Client\ TestAdmin.

two。 Insert the USB storage drive and complete the installation.

3. To open device Manager, click the start button, type mmc devmgmt.msc in the start search box, and then press Enter.

4. If the user account Control dialog box appears, verify that the action you want to perform is displayed, and then click continue.

Device Manager starts and displays a tree that represents all devices detected on your computer. Your computer name is displayed next to the node at the top of the tree. The following nodes represent various categories of hardware into which your computer devices are classified.

5. Double-click disk drives to open the list. (figure 1)

6. Right-click the entry for the USB storage drive, and then click Properties.

The device Properties dialog box appears. (figure 2)

7. Click the details tab.

8. In the Properties list, click hardware Id.

Under value, record the string displayed. (figure 3)

Note: you can copy these strings to the clipboard by highlighting the text and pressing Ctrl-C. Because many hardware ID have multiple underscore characters, it is useful to copy them to a text file, from which you can paste when you have to specify an identifier. This approach greatly reduces the likelihood of errors when you have to add specific identifiers to the list of approved or prohibited devices.

9. In the Properties list, click compatible with Id.

Under value, record the string displayed. (figure 4)

10. Click OK to close the dialog box.

(3) Uninstall the USB storage drive

1. Log in to the computer as DMI-Client\ TestAdmin.

two。 To open device Manager, click the start button, type mmc devmgmt.msc in the start search box, and then press Enter.

3. If the user account Control dialog box appears, verify that the action you want to perform is displayed, and then click continue.

4. Right-click the entry for the USB storage drive, and then click Uninstall. (figure 5)

5. In the confirm device removal dialog box, click OK to complete the uninstall process.

6. When Windows completes the uninstall process, it removes the device entry from the device Manager tree.

7. Unplug the USB storage drive from the USB port.

The above is how to set removable storage access by group policy in Windows 2008. Have you learned any knowledge or skills? If you want to learn more skills or enrich your knowledge reserve, you are welcome to follow the industry information channel.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.