up vote 4 down vote favorite
1
share [g+] share [fb]

A friend of mine is the IT manager in a finances company back in our country. Since in these days they are programming some layoffs he has become increasingly suspicious about the employees stealing information from the company using usb sticks, pendrives or whatever other means of storage. So, I was wondering if there it is a way to make the Operating System to encrypt automatically all the write operations to drives such that the information is render unusable unless used in certified computers.

link|improve this question
Not too important for your (nice) question, but: what is "programming some layouts"? – Arjan Nov 6 '09 at 12:16
Sorry, as english is not my native language I tend to make a lot of mistakes – Sambatyon Nov 6 '09 at 12:29
1  
Aha, now I understand. Still, it doesn't matter for the question. (You could leave it out altogether I guess.) So, those people are not computer experts I guess? If they have internet access they could probably just use Gmail to upload the same secrets...? – Arjan Nov 6 '09 at 12:41
feedback

2 Answers

up vote 0 down vote accepted

I think the idea is to encrypt the Windows partition (SafeBoot?) which enforces all copies of data within that to be made only to other locations that are also encrypted.

link|improve this answer
It all depends on how "data" is copied. It may protect files copied with CopyFileEx(), but there are so many ways around. – grawity Nov 6 '09 at 13:10
feedback
up vote 0 down vote

Simple, low tech but will surely work.

Disable all spare USB ports. Use PS2 for Keyboard and mouse. :)

link|improve this answer
And, disconnect the Internet uplink. – nik Nov 6 '09 at 14:06
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.