USB Storage Management

Contents

USB Storage Management

Description

With a dedicated Nexthink Act remote action, configure the access to removable devices. Useful for protecting against virus execution or for preventing the usage of removable devices.

Platforms

  • Windows 10 and 7.

License modules

  • Nexthink Act.
  • Nexthink Engage.

Compatibility

  • Nexthink V6.14 and later.

Script Set USB Storage Access

  • Version 1.0.0.0 - Initial release

Script Description

Sets USB storage access by modifying group policies. The script is designed for Windows 10 and 7.

Execution context and suggested scheduling

Run the script manually as local system.

Parameters

ID Label Description
1 CampaignId UID of the campaign to notify user that the device must be restarted
2 DenyUSBStorageExecuteAccess Deny removable device execute access. Type "true" for denying execution, "false" otherwise
3 DenyUSBStorageReadAccess Deny removable device read access. Type "true" for denying reading, "false" otherwise
4 DenyUSBStorageWriteAccess Deny removable device write access. Type "true" for denying writing, "false" otherwise

Outputs

None.

Further Information

Deny execute access: Device will not prevent users from transferring anything from/to the removable storage, but it will block users from opening programs and files stored in the removable storage. This action is suitable if the administrator only wants to protect the device from virus or malware that could be in the removable storage.

Deny read access: Device will totally block all users from reading contents in the removable storage. It also effectively prevents users from transferring anything from/to the removable storage. Administrator can use this if they want to completely restrict the usage of removable storage.

Deny write access: Device will prevent all users transferring anything to the removable storage, but not the other way around. Users will still be able to read contents in the removable storage. This action is suitable if the administrator only wants to protect confidential data in the device from being copied out to a removable storage.