It’s a combination of GPOs and tools like Symantec’s Endpoint Manager (probably bolluxed the name there)
The only USB accessories we can plugin (other than customer-approved thumb drives (which they supply pre-encrypted)) are mice, keyboards, etc
But if the EXE isn’t on the C:\ drive, it won’t run – and if it’s not signed by their cert(s), it won’t run
That includes things like PuTTY – you have to run the one they’ve put in the catalogue, not the one you can download from Simon Tatham directly
February 06, 2020 at 07:57AM
via reddit https://www.reddit.com/r/cybersecurity/comments/exgr3d/web_filtering_bypass/fgp13t1?utm_source=ifttt