When a user connects his mobile phone to a laptop in our organisation, his complete mobile data can be accessed from laptop. How do we control this and restrict the user from accessing mobile data when the phone is connected to laptop by USB?
I assume you mean data tethering from the phone to the laptop.
If it is pure USB, you can force an USB blocking policy via GPO. Blocking WiFi tethering will be much more difficult, unless you restrict the laptopts to certain WiFi points only. The second option will not make you popular, but it will prevent the user from accessing information over a mobile network
Instructions on Group Policies
USB tethering is managed over the MTP, which on Windows is the same as a WDP Device.
- Open the Group Policy Editor
- Go to either computer or user settings.
- Administrative Templates \ System \ Removable Storage Access
- WDP Devices, then disable Read and Write access.
You can use a DLP solution from a provider as Mcafee, Eset or even Microsoft inTune to prevent data leakage, web filtering and App control. Be prepared your wallet.. ;)