I have a requirement and I'm stuck to fulfill it.
I applied the permanent policy to Disable USB Storage access on all computers. I stuck while managing the exceptions.
E.G:- I'd disabled the USB on 100 systems permanently. Out of these 100 systems I need to provide access to 10 systems due to business requirements.
Now, when I want to provide the access to 10 systems (which are part of Disable USB access policy), first I need to stop the previous action of disable policy and take a new action to enable the USB on only those 10 systems. It worked fine at the initial stages, however when my client base is getting increased, my exceptions are also getting increased. While handling this It's consuming more manual work and having the scope for Human Errors. If any one has the solution to fulfill this requirement.
To be precise I'm trying to achieve the following
1. By Default I need to disable USB storage on all 100 systems which are reporting to my console, if any new system comes in to the console the USB should get disabled on those systems too and the policy should disable the USB access if any body fiddle with the settings locally or remotely at the endpoint
2. Out of 100 systems reporting to the console I need to enable the USB on 10 systems for specific time period (E.g.:- for 3 months from today)
3. After 3 months the USB access should be disabled an all 10 systems automatically
Do we have any option to achieve this?