Can not Block Writing to USB drives through the Network share
1. Apply the application control rule sets "Block writing to USB drives" to the client.
2. Insert the USB drive to the client and the drive displays "Drive *" on "My Computer".
3. Right click the "*" drive and share this drive, add "full control" permissions.
4. Access this USB drive "*" through the network share from local PC.
5.USB drive can be writen .
This is a known issue. it is by_design. Our OSP based on process information in user mode. we can block the user mode program read and write usb. but if using network share usb, the action of writing and reading are completed by kernel mode. so we can't block it. even using "File mon" can't find it read or write actions.
Imported Document ID: TECH192641
Subscribing will provide email updates when this Article is updated. Login is required.