I currently have DLP USB restriction enabled. Currenlty I stay adding users to the restriction list manually.. I would like to know if thre is a better way to mangae this. I was thinking of adding the Active directory OU where I have all my users, then adding the users who are able to use the USB in the same list however this time with the enable function flagged.
Will this fix my problem? please note that the users flagged as enabled will be in the OU which is flagged as disabled.