Securing USB Devices

1. Name the Configuration
2. Define Configuration
3. Define Target
4. Deploy Configuration

The Secure USB Configuration is used to Enable or Disable the selected USB Devices for individual users. This configuration will be applicable to a particular user irrespective of the computer he uses to log on.

Step 1: Name the Configuration

Provide a name and description for the Secure USB configuration.

Step 2: Define Configuration

1. Select the devices to be enabled/disabled from the given list:
   • Mouse
   • Disk Drive
   • CD-ROM
   • Portable Devices
   • Floppy Disk
   • Bluetooth
   • Image
   • Printer
   • Modem
   
   
2. LogOff Action

The LogOff Action setting helps you to retain/revoke the Secure USB configuration when the User Logs Off.

• Don't Alter Device status - Select this option to retain the configurations
• Disable All Devices Excluding Mouse - Select this option to revoke all the Secure USB configuration of the user when he logs-off.

Note: It is desirable to define and deploy Secure USB configurations at the computer-level. This is required because, all the user-specific USB configurations are also set at the computer level. The sequence of operations during system startup and user logon/logoff given below helps you to understand better:

• System Startup - The Secure USB configuration defined at the computer-level gets applied.
• User logon - The Secure USB configuration defined at the computer-level gets applied first. Then, Secure USB configuration defined for that user, if any, gets over-written.
• User Logoff - The Logoff action defined for that user gets applied.

From the above, if there is no computer configuration has been defined for securing the USB drives and if the LogOff Action is set at "Don't Alter Device Status", the user configuration will be available for other users who log on to that computer subsequently who do not have any specific configurations defined for them.

Step 3: Define Target

Using  the Defining Targets procedure, define the targets for deploying the Secure USB Configuration.

Step 4: Deploy Configuration

Click the Deploy button to deploy the defined Secure USB Configuration in the targets defined. The configuration will take effect during the next user logon.

To save the configuration as draft, click Save as Draft.