HI There,

Can anyone comment on which MS Product can report on USB usage on end devices for eg

Amount of data transferred to a USB Device or Place restrictions on which machines can allow USB Flash drives etc.

Thanks in advance

If you are only looking for an MS problem them GPO are the only thing that will do this and all they will do is block USB devices from accessing the PC.

for restricting via GP, these articles should help:
http://www.grouppolicy.biz/tag/usb/

http://msdn.microsoft.com/en-us/library/bb530324.aspx

Thanks for the reply,

We are looking for something equivalent to Symantec Endpoint Encryption Device Control in MS Space.

Let me know what your thoughts are.

Thanks for the reply,

We are looking for something equivalent to Symantec Endpoint Encryption Device Control in MS Space.

Let me know what your thoughts are.

GPOs are you only MS option. so you need to look at 3rd party tools if it will not do what you want...

Thanks Heaps,

Any third part tools with MS/SCCM/MEP integration?

BitLocker To Go and Group Policy to encrypt and restrict removable media.  It isn't as full featured as the Symantec product, but it is good enough for most organizations with compliance requirements from HIPAA, PCI, and law enforcement.

 

System Center Endpoint Protection is just used for scanning removable media for malware. It does not encrypt or restrict USB device usage.

Thanks Heaps,

Any third part tools with MS/SCCM/MEP integration?

I don't know of any that integrates with CM12.

Did you ever find a solution for this issue. We are migrating from Symantec Endpoint Protection 12 and we use the app control option to restrict executables from running on the usb drives. I just finished a fresh install of sccm 2012 r2 and cannot find anything equivalent to Symantecs application and control rules option. I did come across this option http://www.squadratechnologies.com/ but I'm not sure if it will work.