Blocking Removeable media via GPO with logging


we have requirement block write access removable media unless users in specific groups. accomplished task group policy (administrative templates, system, and removable storage access.), have requirements log events when users attempt write usb devises , denied.

so gpo in place and users authorized write able write , users authorized read can read only. need log event when user in read group attempts write.

does know event log generates when users attempts write removable media , pop displays says denied?

  

thanks -brandon


double-click computer configuration, double-click security settings, double-click advanced audit policy configuration, double-click object access, , double-click audit removable storage. full details here https://technet.microsoft.com/en-gb/library/jj574128.aspx?f=255&mspperror=-2147217396


Windows Server  >  Group Policy



Comments

Popular posts from this blog

CRL Revocation always failed

Failed to query the results of bpa xpath

0x300000d errors in Microsoft Remote Desktop client