You are using an ad blocker that is interfering with our web typography and internal javascript. Please whitelist our domain to live in a more beautiful world. No ads here, just really great software!

Experience Everywhere On-Demand: Learn how Global 2000 firms are approaching Digital Employee Experience in 2021. Get Access

cookie alert

We use cookies to offer you a better browsing experience, analyze site traffic, personalize content, and serve targeted advertisements. If you continue to use this site, you consent to our use of cookies.

Nexthink Library

USB Storage Management

Latest Version: 1.1.0.0
Install

Content

Campaigns - 1
Remote actions - 1
Set USB Storage Access

Required Products

Nexthink Act
Nexthink Engage

Platforms

Windows 7
Windows 10

Compatibility

V6.14 and later

Description

This Library pack is composed of a Remote Action script which helps setting USB storage access by modifying the group policies.Please use the link on the left menu to learn more about the function and range of action of the script.

Versions

  • 1.1.0.0 - 30 Sep 2020 - Improved "Set USB Storage Access" Remote Action
  • 1.0.0.0 - 07 May 2019 - Initial release

Set USB Storage Access

Script Description

Sets USB storage access by modifying group policies. The script is designed for Windows 10 and 7.

Execution context and suggested scheduling

Run the script as 'local system'. The script should be executed manually.

A timeout of 120 seconds is recommended.

Parameters

Label Description
Campaign Id UID of the campaign to notify user that the device must be restarted. Use an empty GUID (00000000-0000-0000-0000-000000000000) or empty value "" to avoid the Campaign
Deny USB Storage Execute Access Deny removable device execute access. Type "true" for denying execution, "false" otherwise
Deny USB Storage Read Access Deny removable device read access. Type "true" for denying reading, "false" otherwise
Deny USB Storage Write Access Deny removable device write access. Type "true" for denying writing, "false" otherwise

Outputs

None.

Further Information

Deny execute access: Device will not prevent users from transferring anything from/to the removable storage, but it will block users from opening programs and files stored in the removable storage. This action is suitable if the administrator only wants to protect the device from virus or malware that could be in the removable storage.

Deny read access: Device will totally block all users from reading contents in the removable storage. It also effectively prevents users from transferring anything from/to the removable storage. Administrator can use this if they want to completely restrict the usage of removable storage.

Deny write access: Device will prevent all users transferring anything to the removable storage, but not the other way around. Users will still be able to read contents in the removable storage. This action is suitable if the administrator only wants to protect confidential data in the device from being copied out to a removable storage.

Test Scenarios

PolicyChangedCampaignSent
Test Case New policies needed to be applied
Environment VM Windows 7 x64 (Multi-language) - VM Windows 10 x86/x64 (Multi-language) (1803/1809/1903)
Results Success - Campaign sent, computer restarted, notification sent to execution status
AuthenticationErrorsDuringLastDay
Test Case No new policies need to be applied
Environment VM Windows 7 x64 (Multi-language) - VM Windows 10 x86/x64 (Multi-language) (1803/1809/1903)
Results Success - Correct check and notification sent to execution status
Thank you!