Sneakernet

Anyone have any ideas on how to keep non-authorized thumb drives off a local network?

Not all thumbs just the ones that are not approved for use.

Hi,

Non-authorized by whom whether by microsoft or your enterprise security settings in win server.

More details will be appreciable.

Rizin

Sophos the anti virus we use has this feature. Other than that Microsoft NAP might be able to do this as well.

Allowing one drive to work vs another drive might be hard because they typically use the same driver in windows....

For example lets say I went out and bought 20 thumb drives and assigned them to users how would I go about making sure that only those 20 thumb drives are allowed on the network?

As far as I know thumb drives do not have a unique hardware address so if you put a unique key on a thumbdrive it could be simply copied to another disk volume. Is there a way to make a thumb drive unique?

Yes you can, if you are looking in Windows OS Just follow the below link

www.petri.co.il/disable_usb_disks_with_gpo.htm

Rizin

Wouldn't that disable ALL usb vs just the ones I want to allow on the network?