Introduction
Recently HP released version 9 of the great ThinPro Operating System for their Thin Client devices. At the time of writing ThinPro 9 is not available for all Thin Client machines - for instance, I was not able to download version 9 for the HP Thin Client T530. I was able to download the new OS for the the HP T540 device. One very good new feature for a security strict organization (and all organizations should be security strict) is USB filtering. We don't want users plugging in USB storage keys, for instance - but we may not want to disable the USB ports in BIOS. With this new feature we can disable USB keys but allow other USB devices, such as cameras, for instance, to be plugged into the thin client. Here is how this is done.
Enter Admin mode
You will notice the ThinPro 9 OS has a new and stylish default wallpaper. You can click on the icon in the bottom left hand corner of the screen to enter Administrator credentials.
Enter in your Administrator's password and click on OK.
Enable USB Filters Whitelisting
Select Control Panel and then click on Hardware and select USB Manager. Click on the USB Filters tab. You will notice by default that the USB Filter is off.
Remove Access to USB storage keys
Click the Whitelist option. Highlight Mass Storage and click on Remove and then Apply.
You will no longer be able to mount a USB key and save data to it.
Whitelist a USB storage Key
If you do want to allow a specific type of USB key to be used on the thin client you can plug it in and once again (in Admin mode) go to Control Panel\Hardware - click on the USB Manager, select USB Filters\Devices. You can then select your USB key, click on OK and then Apply.
No comments:
Post a Comment