How to protect business data from being removed by an employee using encrption?

Hi,

I am looking to beef up security on an office network. Aside from the obvious: physical security, limiting user privileges using Active Directory, running a firewall that does stateful packet inspection and running anti-virus software; I would like to prevent users from copying a file to a USB flash drive and taking it home or cloning a hard disk or just removing the hard disk from a work station.

I can block all email sites using the Dell SonicWall so that employees cannot email themselves sensitive corporate data but what do I do about USB drives. The BIOS on the workstations does not allow them to be disabled.


Any Suggestion Would be appreciate.

I didn't find right solution on the internet.

Reference:
arstechnica.com/civis/viewtopic.php?f=21&t=1296111
Digital advertising studio

Thanks

Go to GPO and set.
User Configuration \ Administrative Templates \ System \ Removable Storage Access \ All Removable Storage classes: Deny all access.

Hope this help