How to Deploy DEKSI USB Security

DEKSI USB Security consists of two parts: The DEKSI USB Security Service is an agent installed on every client computer, and the DEKSI USB Security Management Console administers the agents installed on the client computers.

With the DEKSI USB Security Management Console, it is possible to centrally install and remove the DEKSI USB Security agents, manage the settings of DEKSI USB Security agents, and view the logs of external device connections on all computers on the network.

The DEKSI USB Security Service, an agent which is installed on every computer, is part of the distribution. It is included in the form of the file stopusb.msi, located in the installation folder. (For example, C:\Program Files\DEKSI USB Security\StopUSB.msi)

The DEKSI USB Security Management Console is a control interface for the installed DEKSI USB Security agents. To open the console you need to run the stopusbcontrol.exe file from the DEKSI USB Security installation folder.

You can deploy DEKSI USB Security to your entire network in several ways:

• The preferred method of installing the DEKSI USB Security agent is using the stopusb.msi file with installation through the Group Policy Windows Logon/Startup Script. In this case, the installation of the DEKSI USB Security agent happens at startup of the client computers. You need Windows Server or Windows AD Server for this method.
• Installation using the msiexec utility. For installation of the DEKSI USB Security Service, you need to execute the command: msiexec /qn /i stopusb.msi
• Deploying with the DEKSI USB Security Management Console. In this case, you must provide the administrator password on the remote computer, and also disable simple file sharing. If the network has a domain, then domain administrator rights are required for installation of the DEKSI USB Security agent.
• Manual installation of the DEKSI USB Security agent on all computers. For this method, you must run the stopusb.msi file, which is part of the DEKSI USB Security package, on all computers requiring protection. After installation, by default, all external media will be blocked without the requested password.

After installation, the DEKSI USB Security agent will be recorded in the system folder (%windir%/system32). The DEKSI USB Security agent is first installed with the default settings, meaning that access to all external media will be closed off to users without the requested password. Also the list of allowed devices will be empty, and all operations associated with external media will be written to the log file. After deployment of the DEKSI USB Security Service, you can install other settings.