Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

A friend of mine is the IT manager in a finances company back in our country. Since in these days they are programming some layoffs he has become increasingly suspicious about the employees stealing information from the company using usb sticks, pendrives or whatever other means of storage. So, I was wondering if there it is a way to make the Operating System to encrypt automatically all the write operations to drives such that the information is render unusable unless used in certified computers.

share|improve this question
    
Not too important for your (nice) question, but: what is "programming some layouts"? –  Arjan Nov 6 '09 at 12:16
    
Sorry, as english is not my native language I tend to make a lot of mistakes –  Sambatyon Nov 6 '09 at 12:29
1  
Aha, now I understand. Still, it doesn't matter for the question. (You could leave it out altogether I guess.) So, those people are not computer experts I guess? If they have internet access they could probably just use Gmail to upload the same secrets...? –  Arjan Nov 6 '09 at 12:41
add comment

2 Answers

up vote 0 down vote accepted

I think the idea is to encrypt the Windows partition (SafeBoot?) which enforces all copies of data within that to be made only to other locations that are also encrypted.

share|improve this answer
    
It all depends on how "data" is copied. It may protect files copied with CopyFileEx(), but there are so many ways around. –  grawity Nov 6 '09 at 13:10
add comment

Simple, low tech but will surely work.

Disable all spare USB ports. Use PS2 for Keyboard and mouse. :)

share|improve this answer
    
And, disconnect the Internet uplink. –  nik Nov 6 '09 at 14:06
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.