All Removable Storage classes: Deny all accessID: oval:org.secpod.oval:def:19415 | Date: (C)2014-05-29 (M)2023-07-04 |
Class: COMPLIANCE | Family: windows |
The All Removable Storage classes: Deny all access machine setting should be configured correctly.
Configure access to all removable storage classes. This policy setting takes precedence over any individual removable storage policy settings. To manage individual classes, use the policy settings available for each class. If you enable this policy setting, no access is allowed to any removable storage class. If you disable or do not configure this policy setting, write and read accesses are allowed to all removable storage classes.
Fix:
(1) GPO: Computer Configuration\Administrative Templates\System\Removable Storage Access\All Removable Storage classes: Deny all access
(2) KEY: HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\Deny_All
Platform: |
Microsoft Windows Server 2008 R2 |