We have just setup our K1000 and are trying to see if it is something we can utilize. We currently use GPO and ESET to block the use of USB drives but I have been told that the K1000 might be a better option that allows more of a fine tuned control over that.


Is there a way to block USB based on the type of device rather than just as say a storage drive? It would be nice to be able to block thumb drives but allow cameras as we need to use them and it feels a bit unsecure to enable USB devices just for that, it tends to lead to someone loading a virus ridden thumb drive.

0 Comments   [ + ] Show Comments

Comments

Please log in to comment

Answers

0

Well after a bit of digging, and confirmation from our KACE trainer that we can't do it, I did find this:

https://technet.microsoft.com/en-us/library/cc731387(v=ws.10).aspx

If anyone happens to need the ability to block USB but allow specific devices this will work the best as it allows more precise control where as the USB Enable/Disable in the K1000 is just a blank block of the USBSTOR in the registry so it blocks anything that uses that to load such as flash drives, cameras or external HDDs.

Hope this helps others.

Answered 05/01/2015 by: jimmysmitty
White Belt

  • good work on finding an answer to your question. I have in the past used Devmgr to disable devices, but you need to know its details to block it. The KACE approach seems a little basic.
Please log in to comment
Answer this question or Comment on this question for clarity