Tip #1: Blocking USB Devices in Schools

One of the most common requests we hear from IT administrators is to provide some control over USB memory sticks. They are so compact and contain so much memory that many organizations worry about sensitive data “walking out the door” in the hands of a student, an employee, or even a visitor whose had temporary access to a computer. At schools, an additional concern is the tendency of students to use USB devices to introduce programs that don’t belong on school computers, along with viruses and other malware.

Solution: Implement access controls for USB devices

Controlling USB access helps to prevent students from introducing unwanted programs or viruses into the school network, and ensures that sensitive school data doesn't walk out the door on a USB memory stick. A variety of device control software solutions provide this capability, along with the ability to control access to hard drives, CDs, WiFi devices and more.

What to look for in device control software

•User-based device access controls: You may want to allow teachers or network administrators to use certain USB devices, while blocking students, so make sure that your USB blocking software can distinguish which groups of users to block.

•Scheduling when controls are active: If your computer lab or library computers are used after hours, you may want to tighten control on USB access after school. Look for programs that let you adjust controls to the school schedule.

•Selective blocking of USB device types: Since your school probably uses many types of USB devices (for example - USB keyboards or headsets) it's essential that the device control software enables you to selectively block certain classes of devices, such as memory sticks or flash drives, while allowing access to the devices you approve.

•Tools for easy management of USB devices: Determining which USB devices are being used on your network is much easier if your device control software includes a Scan utility. 

Cost-saving approach: Combine device control with hard disk protection

You're probably already using some type of hard disk protection software to erase virus damage and restore your computers to a known good state when there are problems. One way to save money, and add USB device controls to your school network, is with a solution that combines hard disk protection and device control, such as Netop's ProtectOn Pro endpoint protection software. You get all the benefits of device control software, hard disk protection and much more, all for about what you would pay for hard disk protection alone.

Save on endpoint protection - request a quote

Netop ProtectOn Pro is the affordable endpoint protection software that combines robust hard disk protection with powerful remote management and comprehensive Internet, application and device controls. To try ProtectOn Pro, download a free 30-day trial here. If you are already using ProtectOn Pro for hard disk protection, it is easy to use the same software to control USB devices.

Use the Policy Editor in ProtectOn Pro to define your policies for USB access.

1. First create and name the policy.
2. Set the default policy for USB devices to "no access" and then define a whitelist with the types of devices you want to allow.
3. For the USB White list you can choose:
   
   • Add Classes: The policy will cover all types of USB devices belonging to the selected class.
   • Add Devices > Add devices: Select USB devices from the database and add to the white list.
   • Add Devices > Add local devices: Select USB devices at the local computer and add to the white list.
   • Add Devices > Scan computers: Scan the computer network for USB devices. Once the scanning is complete, devices can be selected and added to the white list.
4. Use the second tab to set the schedule during which this policy should be active (for example: throughout the school day, or only on evenings and weekends.)
5. Use the third tab to determine to which users the policy should apply (for example: to students, teachers or visitors) and/or to which computers (for example those in the library)
6. To activate the policy, click apply.

See a demonstration

For a demonstration of all of ProtectOn Pro features, including USB control, watch the 29 minute ProtectOn Pro webinar.

Download a free trial

You can try Netop ProtectOn Pro free of charge for 30 days, and see what a difference USB controls make in your school.

Download free 30-day trial

Let us know if this tip was helpful. We welcome questions and suggestions for improvements, as well as additional tips you would like to share.

Send feedback