Here, you could set the following policies to check how it works:ġ. I hope you have an active Directory setup in your environment. Migration to the cloud becomes much easier of you want to go that way. We use a lot of Linux PCs as clients to RDS servers and save on Windows 10 licences and PC hardware upgrades. PCs become disposable and you often need lower spec. You not only gain security benefits but central control and management of your applications and data. You just need to purchase RDS client/device licences for the server and relocate your applications to it. This is all possible using the tools Microsoft provides with Windows 10 and RDS. PCs can then be hacked, stolen or dismantled and no private data accessible. You can configure the PC connections such that nothing can be copied down from your data centre. Then restrict physical access to the server for USB transfer by the MD-approved staff. Then you use the properties of the Remote Desktop connections to disable access from the server to the PCs USB devices. In your case, I would explore Remote Desktop Services (RDS) to separate users' workspaces from their PCs. Can they open PCs and remove hard drives? Copy hard drives onto a handy laptop connected HDD caddy? Access your network from a phone via WiFi? All these points of entry are beyond and apart from USB. Just limiting USB access is not your only risk. This needs considering as part of a company-wide security policy. You need to limit who can rock up to their PC and snag a load of company files onto their USB stick. This is, I assume, a data security question.
0 kommentar(er)
