Good day,
May I know is there a possibility to allow an administrator to set an account or user by limit their access to certain features like USB usage, turn off wireless, basically would like to prevent a user to bring some confidential files or document out from notebook or PC?

Thanks

Yes. You can disable usb via policy. Or install sep and turn off the usb function bloxking..it's abit more advance than gpo coz it can detect mouse or headphone or external storage and block accordingly

Also disable file share and content sharing categories from your proxy so users aren't able to go to these sites to upload stuff

Also consider having always on VPN so users must use corporate network to connect. So they are not able to connect to hotspot and share files or even use isp wireless to send these over. If money issues then see if your proxy provider has solution like bluecoat unified agent that protect the pc from access to third party email etc while on private internet....it's not that effective ( always got bugs) plus bluecoat


Also consider to implement mail content scanning so all emails to third party and prefix like Gmail.hotmail etc are scanned thru



So yeah can be done.

Thanks for your guidance! May i know what is sep ? mind to share the link ?

Symantec enterprise protection