That leads us to the old scenario where we would like people to work with important data, but still have no full control over it, control as in copy, mail, duplicate by taking films/photos. Does it help finding a new concept? Maybe.Ībout your " why not actually protect the data though?" The user may still write it to will only be readable on trusted domain connected devices. Combine the settings the article describes with GPOs that deny using WPD devices and DVDs for data transport and you have removable media covered to the extent that you know, no data will enter unencrypted removable media AND those encrypted devices where If you read my second link, you can see how easy it can The reason why I commented was because I see that BL policy as an important puzzle piece for data leakage prevention and it could fit in here. Even Windows Phones present themselves as WPD storage, notĪs "ordinary" removable storage, like usb thumbdrives do, so they are not affected by the policy. Also, it can only help if those phones present their storage as removable drive. Policy will not help for those and it would only be able to stop write access and not read access in the first place. Surely, as you say, those phones (unless they are windows phones) will not ever use bitlocker, so that The "OP" is looking to deny read and write access on phones unless those are encrypted. But what sets the drive to read-only? It's another component (I don't know which), and it does not depend on that service, because it works without the service running. This material will help you to secure your data on h.
Bitlocker download android how to#
So this service is invoking the notification. Watch how to encrypt a USB disk with BitLocker and how to unlock drive with password or recovery key. It does not appear, if we disable and stop the Service called "Bitlocker drive encryption service",
Who starts this popup? Windows? Bitlocker? Let's see. See, if you use the policy that I linked to, you activate it and you connect an unencrypted USB drive (take a usb thumb drive), immediately,Ī popup appears and tells you to encrypt that drive, because if you don't, it will be read-only.