Restrictions
Device Restrictions
Removeable Storage Media
To eliminate the possibility of having a laptop compromised via removable storage media such as a USB flash drive or an external hard drive, the following removable storage media is blocked if connected to a company laptop:
- USB Flash Drives
- External Hard drives
- Memory Cards
- Digital Cameras
- Smart Phones (charging is not affected)
Application Restrictions
Currently employees have full administrative access to their laptop, allowing for any application to be installed without approval. Due to the risk of infection leading to data breach or account compromise, its asked that employees only install applications which are relevant to their job.
The following types of applications are not permitted to be installed on laptops:
- Remote access software (TeamViewer, LogMeIn etc.)
- Games
- VPN clients (Nord VPN, SurfShark etc.)
- Applications used solely for personal use.
- Application from unknown developers (random applications from SourceForge for example).
- Applications which have not been digitally signed.
If you are unsure if an application you require is permitted or not, please contact IT Support for confirmation before installing.
Email Restrictions
Attachments
Any email message with the following attachment filetypes will be blocked upon being received by Microsoft 365. The sender will be notified via a NDR (non-deliverable report) indicating that the email was not delivered due to the email including a banned filetype.
| .ace | .ani | .apk | .app | .appx | .arj | .bat | .cab |
| .cmd | .com | .deb | .dex | .dll | .docm | .elf | .exe |
| .hta | .img | .iso | .jar | .jnlp | .kext | .lha | .lib |
| .library | .lnk | .lzh | .macho | .msc | .msi | .msix | .msp |
| .mst | .pif | .ppa | .ppam | .reg | .rev | .scf | .scr |
| .sct | .sys | .uif | .vb | .vbe | .vbs | .vxd | .wsc |
| .wsf | .wsh | .xll | .xz | .z | .ppsm | .xlsm |
Receiving Blocked Files
If you require a file that would be blocked by the above restriction, and that file is coming from a trusted source, please ask that the individual provide you the file via the LiquidFiles service.