GPO for file access

czql5v 221 Reputation points

Hi All,

We have recently had quite a few security breaches where users have downloaded restricted files to a USB device and copied for personal use. The users have been cleared to use USB devices on our system and have access to files but we need to restrict what the users can download onto a USB.

Do you know if a GPO would be able to restrict certain files from being downloaded onto a USB device?


A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.
5,079 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Dillon Silzer 56,516 Reputation points

    Hi @czql5v

    The only GPO that I am aware of is to prevent copying files to USB (write access). I'm not sure about blocking certain files, but perhaps this will assist you:

    How to Enable or Disable Write Access to Removable Disks in Windows


    If this is helpful please accept answer.

    0 comments No comments