Is there a way to audit access to USB drives with built-in windows logging? We already do GP based auditing on our server's NTFS file system, but how do we extend that to workstations? There are no guaranteed of what kind of file system will be plugged into the workstations through USB. It may be NTFS or FAT32.
The reason we need to do this is to have a record of potentially unauthorized copying of company files.
Note: we also restricted USB access to majority of machines. That works, but it turns out that the people who ask for (and are given) exception are also those with access to very sensitive info.
Environment: - Windows 2008 R2 Server AD - Windows 7 Pro workstations