When a user connects his mobile phone to a laptop in our organisation, his complete mobile data can be accessed from laptop. How do we control this and restrict the user from accessing mobile data when the phone is connected to laptop by USB?

  • 2
    Do you mean the information stored on the phone? Is this android, iOS, something else? – GnP Aug 29 '16 at 10:02
  • It can be any mobile device. – Maaz Baig Aug 29 '16 at 12:50

I assume you mean data tethering from the phone to the laptop.

If it is pure USB, you can force an USB blocking policy via GPO. Blocking WiFi tethering will be much more difficult, unless you restrict the laptopts to certain WiFi points only. The second option will not make you popular, but it will prevent the user from accessing information over a mobile network

Instructions on Group Policies

USB tethering is managed over the MTP, which on Windows is the same as a WDP Device.

  1. Open the Group Policy Editor
  2. Go to either computer or user settings.
  3. Administrative Templates \ System \ Removable Storage Access
  4. WDP Devices, then disable Read and Write access.
| improve this answer | |
  • Thanks for your response. Yes I mean data tethering from the phone to the laptop. Do you have steps how to force an USB blocking policy via GPO. – Maaz Baig Aug 29 '16 at 12:50
  • @MaazBaig I'll update the post – Yorick de Wid Aug 29 '16 at 13:02

You can use a DLP solution from a provider as Mcafee, Eset or even Microsoft inTune to prevent data leakage, web filtering and App control. Be prepared your wallet.. ;)

| improve this answer | |
  • Hi we already have a DLP from Mcafee on the endpoints but that doesn't restrict mobile phones to be tethered . Can you help me how do I enforce it. – Maaz Baig Aug 30 '16 at 11:52

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.