Hi all,
Last week a Director of our business decided that the situation with regards to USB flash drives needs an urgent review. He asked me to audit all such devices currently in use, what files are on the drives themselves, and to look into a way in which we can improve the security of our data.
He mentioned that he would like USB flash drives to be signed-in/out, and that he doesn't want people using their own.
I can understand his concerns and I can foresee that we won't be able to do all of this without purchasing some form of device management software which will prevent the use of any flash drives other than those which are company provided / approved.
I was just wondering whether anyone here could provide some suggestions? I'm not really sure where to start with this, it's all a bit of a mess as things stand! Currently what we do have is Group Policies which allow only certain members of staff to write to flash drives at all, and staff were given cheap, company-branded flash drives before I started here.
Also, is the whole sign-in/sign-out policy practical?
One more thing to mention - we are using a mix of Windows XP / Windows 7 workstations, along with SBS 2003.
Thanks in advance!