Aggressive Protection for All Fixed Drives and External Drives
This policy template is designed for organizations with a primary goal of enforcing strong security and risk avoidance across the entire enterprise. It is best used when security is significantly more important than usability and the need for less secure policy exceptions for specific users, groups or devices is minimal.
This policy template:
- is a highly restricted configuration, providing greater protection.
- provides protection of the System Drive and all Fixed Drives.
- encrypts all data on removable media devices, and prevents the use of non-encrypted removable media devices.
- provides read-only optical drive control.