You can use device control to specify for your computer which storage media are permitted to read and/or write data. Hence for example you can prevent private data from being moved to a USB stick or burned to a CD. Furthermore, with removable data carriers such as USB sticks or external USB hard drives, you can specify precisely which removable data carriers can be used for downloading data. This means for example that you can use your own USB hard drive to back up data, but other hard drives are not granted access.
To use device control, check the box next to Enable device control and select the devices you want to define restrictions for:
- Data media (e.g., USB sticks)
- CD/DVD drives
- Disk drives
You now have the option of defining rules for the individual storage media.
Here you can specify whether the relevant device cannot be used at all (Block access), whether it can only download data but not be used for storing it (Read access), or whether there are no restrictions for this device (Full access). This rule then applies for all users of your computer.
If you want to grant restricted permissions for storage media to specific users only, in this area you can first select the user name of the user set up on your computer then restrict access to the relevant storage medium as described in General rules. In this way, for example, as administrator and owner of the computer you can permit full access for yourself but just restricted permissions for other users.
Select the user here. If you now click on OK, another dialog opens in which you can specify which access method you want for this user and whether authorization for this user is limited to a specific period (e.g. two weeks) (Validity).
When using removable data carriers such as USB sticks or external hard drives, you can also specify that only specific removable data carriers are allowed to access your computer. To do so, attach the removable data carrier to your computer and click on the Add button. In the dialog that appears, you can select the removable data carrier you want. If you now click on OK, another dialog opens in which you can specify which access method you want for this data carrier and whether authorization for this data carrier is limited to a specific period (e.g. two weeks) (Validity) and whether every user is allowed to use this data carrier under his user access or not.