Can we modify @removable?

tim_graham · ‎10-09-2008

We are currently using CSA to prevent writing to USB drives by using "@removable" and defining a file set for USB (directories matching @ removable).

This has caused a problem when using App-V-formerly SoftGrid to virtualize Adobe Eeader.

App-V uses a Q drive when virtualizing applications. Evidently Q is seen as belonging to @ removable.

In testing, I have changed the file set for USBs to be directories matching @removable but not Q:\**.

This allows Adobe Reader to work without interference, but also allows pdf documents to be written to USB drives.

Is there a way to directly modify @removable? so that it does not include specific drive letters?

nexusiscco · ‎10-10-2008

Tim,

Did you ever get an answer for this?

Could you share with me how your rule-module is?

Someting like custom rule-module with a deny all users to @removable\**\*.*

asp13 · ‎11-25-2008

actually you can block 'usbstore' driver so no usb disks are recognized at all. I'll try to find the exact rules if it's still needed.

aman.diwakar · ‎01-29-2009

Hi asp13,

Do you have that rule? I'm having some performance issues with the operating system when the USB rule is activated, I would appreciate it if you could share that rule with me so I can compare them