Data Loss Prevention

 View Only

Incident generated with GPO to prevent USB write

  • 1.  Incident generated with GPO to prevent USB write

    Posted May 21, 2019 07:47 AM

    DLP v15.5 mp1 / Win 10

    Hello all, i write this in the early stages of troubleshooting.  It appears we sometimes see incidents generated for users that have a GPO preventing writing to removable media.  So the file never gets written to USB but there is an incident anyways.  We do know this occurs for the endpoint agent v15.5 and v15.0.

    Not sure how long this has been occurring.  I'm thinking it's a timing/priority conflict between the agent and the GPO activity?

    anyone else seeing this?