There they were. The dials and switches for every port on the motherboard. "CD and DVD: Deny execute access," "Floppy Drives: Deny write access." It was a beautiful list of restrictions.
In the GPMC, he clicked the "Scope" tab. Under "Security Filtering," he verified that the "Domain Computers" group was listed. This meant the rule applied to... well, every computer in the domain. group policy management console (gpmc)
An intern in the Marketing department had plugged a found USB drive into their workstation to see what was on it. It wasn’t a promotional giveaway; it was ransomware. Within an hour, the virus had encrypted half of the shared marketing drive. The firewall team had contained the breach, but the damage was done. The CIO wanted every USB port in the company disabled by Monday morning. There they were