You can apply group policy on a per-user (or per-group) basis in a standalone environment, but it is more difficult. The datAshur PRO2 will work on any device with a USB port, no software is required. When the drive is disconnected, all data is encrypted using AES-XTS 256-bit hardware encryption (no software required). NOTE: The above is written for domain environments, where the policy can be applied per-user using domain group policy management. Simply enter a 7-15 digit PIN to authenticate and use as a normal USB flash drive. You can launch explorer.exe as a separate user, but it requires making some registry changes. When you need to access the drive, you will need to switch users (log in to Windows with your unrestricted administrative credentials). Open file explorer Select the USB in file explorer right click, and choose turn BitLocker on You will see a starting BitLocker message The next screen asks how you want to be able to unlock the drive. You can then leave the administrative account out of the security-filtered group. By setting the same policy under User Configuration instead, you can apply the policy to a group of users (using security filtering), including your non-administrative account.
Setting the Removable Storage Access policy under Computer Configuration applies the policy to the whole computer. The following solution works in a domain environment and does not require the use of any third-party utilities. (I know this is an old thread, but I feel that the information below is useful for anyone who is trying to accomplish what the OP asks.)
0 kommentar(er)
