Vue normale

Il y a de nouveaux articles disponibles, cliquez pour rafraîchir la page.
À partir d’avant-hierFlux principal

leHACK 2024 – REVOLUTION !

Par : UnderNews
14 juin 2024 à 16:04

la 20ème édition de leHACK aura lieu les 5 et 6 juillet 2024 à la Cité des Sciences et de l’Industrie, à Paris. L’événement se déroulera sur 2 jours entiers, avec son lot de conférences et d’ateliers mais aussi des challenges comme le wargame qui prendra place le samedi soir. Communiqué. 1 Organisateur leHACK est […]

The post leHACK 2024 – REVOLUTION ! first appeared on UnderNews.

Comment The Boys dézingue Donald Trump durant sa saison 4

14 juin 2024 à 15:07

Les chasseurs de super-héros les plus sanglants du petit écran sont enfin de retour sur Prime Video pour une saison 4 qui n’hésite pas à ajouter encore un surplus d’hémoglobine, mais surtout de politique(ment incorrect). Toute ressemblance avec la réalité n’est évidemment pas fortuite.

OpenTofu 1.7: State encryption, provider-defined functions, loopable import blocks, and improved CLI experience

14 juin 2024 à 16:00
OpenTofu, an open-source Terraform fork, announced the release of OpenTofu 1.7 with new features and improvements. Since version 1.6, the first stable release after the fork, over 100 community contributors and OpenTofu's core team joined hands to add the requested features, such as state encryption, provider-defined functions, loopable import blocks, and an improved CLI experience.

AIFFRO K100 SSD NAS Review – Pocket Sized NVMe NAS?

Par : Rob Andrews
14 juin 2024 à 15:00

AIFFRO K100 SSD NAS Review – N100 Powered Flash NAS for Your Pocket?

AND ANOTHER SSD NAS has arrived on the market, this time from AIFFRO with their K100 4-Bay NVMe micro/pocket server. Nowadays, it seems like every brand and it’s subsidiary want to get in on ALL SSD NAS systems! The decreasing cost of SSDs, combined with the rising efficiency of server CPUs have all added up to a lot of brands appearing on the scene out of the East to introduce their new NAS system for Flash storage. Add to this the fact that many of them do not need to include an operating system, thanks to the rising use of the likes of UnRAID and TrueNAS, which means that they can be incredibly competitive with their pricing! But the last 12 months have been a massive spike in the development of NAS systems that have their hardware/brand routes in mini PC development. But where is the line? What sets a NAS system apart from a mini PC? Just the storage? The AIFFRO K100 blurs the lines considerably with it’s N100 CPU architecture, 4x 2280 M,2 SSD slots and 2.5GbE connectivity, arriving at $320. So, let’s review this new micro NAS, see how/if it differentiates itself well enough from a cheap mini PC and hopefully help you decide if the K100 deserves your data!

Where to Buy?

  • Check Amazon for the Aiffro K100 NAS HERE
  • Similar 4-Bay NVMe NAS on AliExpress ($155)CWWK x86 P5 NAS
Component Details
Model K100
Dimensions 117x112x34mm
Material Aluminum alloy
CPU Intel N100, 4 cores, 4 threads, 6MB cache, peak clock speed of 3.40GHz
Video Engine Processor Intel UHD Graphics 12th
Memory LPDDR5 8GB 4800MHz (4x2GB LPDDR4 4800MHz Micron MT62F1G32D2DS)
Storage 4 x SSD (2280 M.2 PCIe Gen3x4, downgraded to 3×2)
I/O Ports 2 x USB 2.0, 2 x TYPE-C USB3.2 Gen2 Data Only 10G, 1 x TYPE-C DC, 1 x 2.5G RJ45 Realtek RTL8125, 1 x HDMI 1.4
Ethernet Realtek RTL8125, 10/100/1000/2500 Mbps Ethernet
LED 1 x POWER LED (Power On: Green+Red, working: Green)
Adapter Automatic Voltage adjustment between 100 and 240V AC, 50/60Hz, 65Watts PD (20V/3.25A), 1.5 meters long Type-C cable
Support System CentOS/Euler/Ubuntu/Win11/FreeNAS/TrueNAS
Accessory VESA Mount (optional)

AIFFRO K100 SSD NAS Review – Quick Conclusion

The K100 4-Bay NVMe SSD NAS is arguably quite an average NAS system, but it stands out by being one of the very few compact NAS systems that arrives at under $300 with dedicated  m.2 NVMe support. There is no avoiding that very little has been done to separate it from being just a Mini PC that happens to have 4 storage slots – but at the same time, with complete NAS OS freedom, lower power consumption with USB power, good sustained performance internally (though peak performance is weak) and being genuinely pocket-sized, make this system an interesting NAS for those looking at a truly portable NAS. The single 2.5G slot is a pain though (i.e no failover and 250-279MB speed limit externally) and the fixed 8GB memory feels restrictive for TrueNAS users (let’s not even bring up ECC…), but as a first NAS from this brand on the market, it still brings competitive hardware pricing to the table. They just need to make more of a concerted effort to truly make this into a NAS system in the conventional sense. Definitely a brand to keep an eye on, but this is a system for hobbyists and homelabber’s who want something more capable than a raspberry Pi, but not for mission-critical data.

BUILD QUALITY - 8/10
HARDWARE - 8/10
PERFORMANCE - 5/10
PRICE - 7/10
VALUE - 7/10


7.0
PROS
👍🏻Insanely Compact
👍🏻4 M.2 2280 SSDs at this scale are incredibly impressive
👍🏻USB-C Power is oddly rare these days!
👍🏻The N100 CPU is tremendously energy efficient
👍🏻Low noise levels
👍🏻Plenty of passive cooling
👍🏻Pre-populated storage options
👍🏻Complete NAS OS\' freedom
👍🏻Very affordable at $320 for a NVMe Flash 4x Bay system
CONS
👎🏻N100 has it\'s limitations in scalability
👎🏻A single LAN Port is a PAIN
👎🏻Fixed 8GB memory, and no ECC (not a big surprise)
👎🏻Similar architecture NAS available for less in the market (example, the CWWK x86 P5 at $155, same CPU and 4 Bays)


Where to Buy a Product
amzamexmaestrovisamaster 24Hfree delreturn VISIT RETAILER ➤ 
amzamexmaestrovisamaster 24Hfree delreturn VISIT RETAILER ➤

DEAL WATCH Is It On Offer Right Now?


These Offers are Checked Daily

AIFFRO K100 SSD NAS Review – Design

The K100 arrives in a predictably small, Mini PC-esque form. Given the scale of modern m.2 NVMe drives, even at the largest capacity, this system does not really need to be particularly large when focusing on this media. There is, of course, the balance between keeping things quiet and compact versus keeping things cool and smoothly running, but there are a decent number of design choices here that balance this point quite well.

The enclosure is metal on all sides. The base has ventilation holes on three of the four sides. The system features only a single internal active cooling fan that we will touch on later on, but it is all very discreet and the silver metallic finish is a nice touch.

Measuring at just a little under 12 cm by 11 cm by 4 cm, this is a tremendously small-scale NAS system that, thanks to its use of USB power delivery, means it is going to be extraordinarily low impact on your hardware environment when deploying. Likewise, weighing in at around half a kilo, it is going to be pretty easy to mount this device anywhere. The front of the system is quite nondescript and only features a single power button and no further connectivity. Given the preponderance of USB connections that we will touch on later, it would have been nice to have one of these ports front-mounted for convenient local backups or storage injection as needed.

The base of the system is a plastic panel with rubber feet that can be removed via four screws to access the internal storage bays. Overall, the design is very understated and, despite the more modest N100 architecture, the K100 still manages to be impressively small-scale.

The K100 feels very well-built and impressively put together. There is no avoiding that this chassis does look like a slightly modified Mini PC enclosure, but that is not necessarily a bad thing for those that want a service system that focuses exclusively on m.2 SSD storage. Let’s discuss the external connectivity of this device.

More so than the scale of this system, the ports and connectivity of the K100 bring back that slightly icky feeling that this is just a mini PC pretending to be a NAS. It’s not that the connections are bad, it’s just that in one very specific area an obvious feature of modern NAS is absent. But before we get to that, let’s keep things positive. The rear of the system is actually pretty densely packed with connections, and interestingly, the system even runs on a standard USB type-C power connection. You will need to deliver slightly more than your average USB-connected port, but I was able to run this system pretty well with my Sharky external battery pack and even a standard 36 W USB phone charger kept this system running. Obviously, it is recommended that you use the included PSU to run this system, but having USB type-C power certainly adds an element of flexibility once again to the deployment of this system.

Additionally, there are further USB type-C and USB type-A ports, with the former providing you with 10 GB performance with externally connected storage drives and the latter being a useful means to set up your KVM for direct access on this system with your visual output. Again, USB type-C is surprisingly rare on modern NAS devices and in this compact frame makes a lot of sense.

There are also dual HDMI outputs, which of course are going to be heavily dependent on the NAS operating system you use, but it’s still a useful thing to have here and they do output 4K at 60 frames per second. Alongside multimedia, these ports can also be used in conjunction with accessing the BIOS of the system easily to install the third-party NAS software that you want to use. So far I have tested TrueNAS Core and Unraid on this device, and both ran fine.

However, now it’s time to get a little down in the dumps and talk about the network connectivity on the K100. Despite the fact that this system supports four m.2 NVMe SSDs inside, and even arrives with a reasonably powerful, yet efficient N100 CPU, the K100 arrives with a single 2.5 GB Ethernet port. That means that all data transmissions outside of this device are going to be bottlenecked to around 250 to 270 MB per second. Although the tiniest bit of me wants to give them the benefit of the doubt and at least highlight that it is not standard boring 1GBE, there is no avoiding that alongside this port, ensuring a huge bottleneck of the performance that this system could reach, the lack of any option towards failover, link aggregation, and easy SMB multi-channel for Windows users is simply going to be impossible here.

Clearly, they have opted to prioritize m.2 NVMe storage inside this system, even going as far as to ensure that each slot has 2000 MB per second bandwidth afforded to it for those SSDs (more on that later), but a single Ethernet port of this calibre is just not going to be enough for most users who are choosing to invest a few extra dollars in SSD media over that of hard drives. Hell, even if this system was running on traditional 3.5-inch hard drives in SATA and not m.2 NVMe drives, it would still massively oversaturate a single 2.5 G NIC.

Now, it isn’t quite the end of the road in terms of network connectivity. There isn’t any kind of PCIe upgradeability present here, nor is there any external PCIe support via something like OCuLink, but depending on the NAS operating system you choose to use, there is perhaps the option to take advantage of USB to network adapters. In 2024, there are plenty of $15-20 USB to 2.5 G network adapters on the market, and even a few $60 5GBE USB adapters supported here. This does mean that you will have to spend a little more, and that you stand to lose more of those 10G USB ports, but at the very least you can still potentially add further network adapters to this system. It’s just a damn shame that you have to spend extra to do it and potentially lose out on some of your expandability.

Overall the network connectivity on this device is….fine, I guess. It certainly is not going to blow you away and it is all pretty much standard. I expect this kind of thing at this price point. Anyway, the obvious bottleneck that these ports and connections are going to serve to the potential RAID performance of those internal drives is going to be a bitter pill to swallow for some users and possibly may serve as a deal-breaker for them to look elsewhere for a NAS. But how does all of this external hardware impact or profit by the internal hardware? Let’s open this up and discuss what’s inside the K100 NAS.

Internal hardware

The base panel of the system is removed by finding four screws located under each of the rubber feet on the base of the system. Doing so exposes an internal metal dissipation plate that lives just above each of the individual m.2 slots, serving as additional heat dissipation for the SSDs during peak use in order to prevent throttling due to high temperatures.

Removing this further panel with four more screws reveals all four of the internal m.2 NVMe slots. Each one is 2280 in length, and if you purchased a device pre-populated, Bay one will be already occupied with a relatively little-known SSD branded drive. Additionally, my review unit arrived with Windows 11 pre-installed on this drive. I’m not too sure if this is what every user who purchases the K100 will receive, or this is something that perhaps a previous reviewer added during their evaluation, but I think the majority of users are probably going to wipe this drive very early in favor of more NAS-focused software shortly after.

It’s also worth highlighting that when I dug into the BIOS of this system, I was able to find out that although the hardware architecture for each of these slots is PCIe Gen 3*4, each slot has been downgraded to times 2 speed. This is something that was added to minimize SSD temperature during operation. This still means that each SSD inside, if you use Gen. 3*4 SSDs, will still be afforded somewhere in the region of 2,000 MB per second bandwidth each.

The N100 CPU that we’ll talk about in a moment is not the most powerful processor on the market, trying instead to find a better balance between performance and power consumption efficiency, so even though each of these SSDs has been afforded 2,000 MB per second of bandwidth, I very much doubt that we’re going to see this system break any records in terms of performance.

Removing this panel then exposes the internal CPU and memory configuration of the K100. This processor arrives with its own small laptop-style cooling fan and, despite its small stature, has become remarkably popular in consumer-grade NAS devices in recent years. The Intel N100 is a quad-core x86 CPU that, although has a very low base clock speed, can be boosted impressively all the way up to 3.4 GHz when needed.

With a TDP-reported power rating of just 6 W and even arriving with a moderate level of integrated graphics, there is a lot to like about this CPU choice.

I have already tested numerous systems with this processor from CWWK, Topton, and Aooster, and on every occasion, this processor architecture did not disappoint in things like 4K Plex media server, container deployment, speedy backups, and multi-user/multi-application simultaneous usage. However, on the subject of memory, things differ ever so slightly with this modest CPU also diminishing the scope for memory allocation + features.

The K100 arrives with 8GB of DDR5 memory at 4800 MHz. For a base level amount of memory on any affordable NAS system, this isn’t too bad. It’s only when you move beyond this that things become problematic. For a start, this memory is provided via four times 2GB pre-soldered memory flash cells attached to the internal PCB. There is no means to upgrade the base of your memory beyond this and therefore running services such as TrueNAS are going to be a little bit more stringent when it comes to the beefier ZFS and inline services that it includes. Additionally, this processor does not support ECC memory and therefore there will be some experienced flash server users who are going to feel less secure in this faster storage media being supported by non-ECC memory – fearing occasional data inconsistencies occurring over time.

Realistically, adding the necessary architecture to equip this system with ECC RAM would have meant changing the CPU for something a little bit more expensive and swapping out the available memory for more expensive ECC modules, so I completely understand why they opted for keeping things more simple and affordable on this smaller system for that target audience seeking entry-level SSD NAS. Nevertheless, the more modest foundations of this system are definitely going to impact overall performance. Some users are obviously going to highlight that performance was already somewhat limited by that 2.5 GBE solo port, but this CPU and memory architecture is definitely going to impact internal performance too. That is possible from those four M.2 SSDs.

AIFFRO K100 SSD NAS Review – Software and Performance

As this system runs on the fantastically modest yet capable Intel N100 (x86 Architecture, 4 Core, 4 thread, 3.6Ghz peak when needed, int.GFX), as well as running on M.2 NVMe SSD Storage, it was always going to be interesting to see what the system power consumption was going to be. When the system was at idle (i.e on, but M.2s not being accessed for 15 mins, system in a ready state, but not processing), the K100 was erring around the 10W mark – perfectly acceptable.

At peak, with all 4 SSDs being accessed and the CPU at 40-50% use, the K100 increased its power consumption up to 16W and eventually peaked at 18W (when the CPU use and SSD use was 75% and above). Again, very respectable numbers for a 4 bay NVMe SSD Flash NAS system.

Next, we can discuss noise. Many new/old NAS users (DiY or turnkey) are moving towards SSD use in their systems primarily for decreased operational noise (and, of course, the massive speed and latency benefits). Now, upon initial boot up, the AIFFRO K100’s fan spun up to maximum speed for 15 seconds, then spun down to a much quieter idle. Initially the K100 (running UnRAID on this occasion) was around the 21-23dB mark in terms of noise, but that was when the SSDs were not mounted in the storage manager. As soon as they were mounted and even vague access was made to them, the fan spun up some more (almost preemptively preparing for heat) and the system sat at around 25-27dB noise levels. Again, not to bad, and the noise would definitely be lost in a broader office ambient environment.

Heavy access however was a different story! Despite these M.2 NVMe drive being Gen 3×2 speed, the system still spun the fan up quickly to maximum and the K100 was hitting 36-38db. Upon the completion of ‘heavy access’, the system took almost 10 mins to naturally reduce it’s fan RPM and lower it’s ambient noise. It’s still a very quiet NAS, but the fan cooling seemed to be remarkably sensitive for an N100 NAS of this scale, especially when you factor in the pre-installed internal dissipation plate and padding on the drives.

Next, we need to discuss internal performance, and unfortunately, this is where we see the shortcomings of the N100 processor when dealing with flash NVMe storage hit a hurdle or two! If people are thinking about an NVMe SSD NAS system, they are already thinking about performance in the gigabytes, not the megabytes. Unfortunately, as each M.2 NVMe is 3×2, you already have a 2000MB/s bandwidth limit on each drive already. Then it became clear in testing that these 4 M.2 are seemingly sharing some internal PCIe paths and the N100 just didn’t have the umpf to keep things moving, as initial SSD Read testing (repeated 1GB file creation) sat around the 580-600MB/s mark. When we have seen similarly powered NVMe systems to this from established NAS brands (the QNAP TBS-464 or Asustor Flashstor 6, which both ran on an Intel N5105 Celeron), we have regularly seen these SSDs only hit around 750MB/s each – so I never expected the K100 to fully saturate PCIe 3×2 – but these numbers below are only a pinch above that of SATA SSD.

On a positive note, the write performance was at least largely equal to that of Read (at 590-600MB/s), which further indicated that there was an bottleneck happening internally. I would add that this performance WAS sustained in both Read and Write – which at least would mean that operations on the K100 would be very smooth and responsive. Just that the peak performance of the M.2 NVMes inside is going to be somewhat limited.

Then, the final blow! Copying data from one M.2 NVMe SSD to another clearly indicated that bottleneck, with the average 1GB file creation speed (looped) at 270-290MB/s on average – so, effectively half of what we have seen and therefore the paths were being fought over across the SSDs and sharing out the 600MB/s or so we have seen till now.

I think, at a hardware production level, there would have been an argument to play with PCIe bifurcation here and limit these M.2 NVMes to 3×1, and use some of that extra afforded resources to introduce more bays and/or improvements in the K100 NICs. Sadly, whether this was a hardware limitation, or simply that this would deviate further from the mini PC architecture (and therefore cost more in development and production), its not present here. The K100 performance feels very average, but I have to give it credit for being solid sustained performance, as well as low power consumption and largely low system noise for the majority of the testing.

AIFFRO K100 SSD NAS Review – Conclusion and Verdict

The K100 4-Bay NVMe SSD NAS is arguably quite an average NAS system, but it stands out by being one of the very few compact NAS systems that arrives at under $300 with dedicated  m.2 NVMe support. There is no avoiding that very little has been done to separate it from being just a Mini PC that happens to have 4 storage slots – but at the same time, with complete NAS OS freedom, lower power consumption with USB power, good sustained performance internally (though peak performance is weak) and being genuinely pocket-sized, make this system an interesting NAS for those looking at a truly portable NAS. The single 2.5G slot is a pain though (i.e no failover and 250-279MB speed limit externally) and the fixed 8GB memory feels restrictive for TrueNAS users (let’s not even bring up ECC…), but as a first NAS from this brand on the market, it still brings competitive hardware pricing to the table. They just need to make more of a concerted effort to truly make this into a NAS system in the conventional sense. Definitely a brand to keep an eye on, but this is a system for hobbyists and homelabber’s who want something more capable than a raspberry Pi, but not for mission-critical data.

PROS of the K100 Flash NAS CONs of the K100 Flash NAS
  • Insanely Compact
  • 4 M.2 2280 SSDs at this scale are incredibly impressive
  • USB-C Power is oddly rare these days!
  • The N100 CPU is tremendously energy efficient
  • Low noise levels
  • Plenty of passive cooling
  • Pre-populated storage options
  • Complete NAS OS’ freedom
  • Very affordable at $320 for a NVMe Flash 4x Bay system
  • N100 has it’s limitations in scalability
  • A single LAN Port is a PAIN
  • Fixed 8GB memory, and no ECC (not a big surprise)
  • Similar architecture NAS available for less in the market (example, the CWWK x86 P5 at $155, same CPU and 4 Bays)

Where to Buy?

  • Check Amazon for the Aiffro K100 NAS HERE
  • Similar 4-Bay NVMe NAS on AliExpress ($155)CWWK x86 P5 NAS

📧 SUBSCRIBE TO OUR NEWSLETTER 🔔
[contact-form-7]
🔒 Join Inner Circle


Get an alert every time something gets added to this specific article!


Want to follow specific category? 📧 Subscribe

This description contains links to Amazon. These links will take you to some of the products mentioned in today's content. As an Amazon Associate, I earn from qualifying purchases. Visit the NASCompares Deal Finder to find the best place to buy this device in your region, based on Service, Support and Reputation - Just Search for your NAS Drive in the Box Below

Need Advice on Data Storage from an Expert?

Finally, for free advice about your setup, just leave a message in the comments below here at NASCompares.com and we will get back to you. Need Help? Where possible (and where appropriate) please provide as much information about your requirements, as then I can arrange the best answer and solution to your needs. Do not worry about your e-mail address being required, it will NOT be used in a mailing list and will NOT be used in any way other than to respond to your enquiry. [contact-form-7] TRY CHAT Terms and Conditions
If you like this service, please consider supporting us. We use affiliate links on the blog allowing NAScompares information and advice service to be free of charge to you.Anything you purchase on the day you click on our links will generate a small commission which isused to run the website. Here is a link for Amazon and B&H.You can also get me a ☕ Ko-fi or old school Paypal. Thanks!To find out more about how to support this advice service check HEREIf you need to fix or configure a NAS, check Fiver Have you thought about helping others with your knowledge? Find Instructions Here  
 
Or support us by using our affiliate links on Amazon UK and Amazon US
    
 
Alternatively, why not ask me on the ASK NASCompares forum, by clicking the button below. This is a community hub that serves as a place that I can answer your question, chew the fat, share new release information and even get corrections posted. I will always get around to answering ALL queries, but as a one-man operation, I cannot promise speed! So by sharing your query in the ASK NASCompares section below, you can get a better range of solutions and suggestions, alongside my own.

☕ WE LOVE COFFEE ☕

 

Galaxy S25 : la batterie serait inchangée, l’autonomie en perdition ?

Samsung pourrait avoir oublié d’améliorer la batterie du Galaxy S25. Celle-ci conserverait la même capacité de 4000 mAh, similaire à celle du S24. En fonction du SoC utilisé par l'entreprise, cela pourrait avoir un impact sur l’autonomie de son prochain fleuron.

L’article Galaxy S25 : la batterie serait inchangée, l’autonomie en perdition ? est apparu en premier sur Tom’s Hardware.

full

thumbnail

Selon la NSA, le groupe de hackers chinois Volt Typhoon est en train de se prépositionner dans des infrastructures critiques

Par : UnderNews
14 juin 2024 à 14:30

Ces derniers jours, le général Timothy Haugh, nouveau chef de la cybersécurité de l’armée américaine et directeur de la NSA a déclaré : “Nous constatons que les tentatives sont latentes dans un réseau qui est une infrastructure critique, qui n’a aucune valeur de renseignement, et c’est pourquoi elles sont si préoccupantes”. Les États-Unis estiment que le […]

The post Selon la NSA, le groupe de hackers chinois Volt Typhoon est en train de se prépositionner dans des infrastructures critiques first appeared on UnderNews.

Learn to Secure Petabyte-Scale Data in a Webinar with Industry Titans

Data is growing faster than ever. Remember when petabytes (that's 1,000,000 gigabytes!) were only for tech giants? Well, that's so last decade! Today, businesses of all sizes are swimming in petabytes. But this isn't just about storage anymore. This data is ALIVE—it's constantly accessed, analyzed, shared, and even used to train the next wave of AI. This creates a huge challenge: how do you

Why Regulated Industries are Turning to Military-Grade Cyber Defenses

As cyber threats loom large and data breaches continue to pose increasingly significant risks. Organizations and industries that handle sensitive information and valuable assets make prime targets for cybercriminals seeking financial gain or strategic advantage.  Which is why many highly regulated sectors, from finance to utilities, are turning to military-grade cyber defenses to safeguard

Windows : comment bloquer les clés USB et les disques externes sur une machine locale ?

14 juin 2024 à 14:00

I. Présentation

Dans ce tutoriel, nous allons voir comment bloquer les ports USB d’un poste de travail Windows pour empêcher un utilisateur de connecter des périphériques de stockage USB : clés USB, disques durs externes USB, etc... !

La restriction configurée dans cet article s'appliquera à un utilisateur, sur l'ordinateur auquel l'utilisateur a l’habitude de se connecter. La configuration sera effectuée via une stratégie de groupe locale, avec la console Microsoft Management Console (MMC) de Windows !

Pour un besoin de sécurité ou de confidentialité, le propriétaire ou le responsable d'un poste de travail ou d'un serveur, peut vous solliciter afin de bloquer l'accès à tout périphérique de stockage USB sur une machine. Nous pouvons citer plusieurs raisons : se protéger contre les éventuels virus pouvant s'exécuter suite à l'exécution d'un fichier, se protéger contre le vol de données de l'entreprise ou données personnelles, etc.

Cependant, si cette machine n’est pas sous l’autorité d’un contrôleur de domaine Active Directory (le propriétaire des lieux n’ayant certainement pas les moyens de s’en offrir, n'en a pas le besoin, ou n’y ayant certainement pas pensé) : comment faire pour y parvenir ?

Eh bien, nous allons répondre à cette problématique dans ce tutoriel ! Si vous travaillez en environnement Active Directory, vous pouvez consulter ce tutoriel :

Remarque : la méthode présentée dans ce tutoriel fonctionne sur les différentes versions de Windows, y compris Windows 10 et Windows 11. Elle fonctionne sur toutes les éditions, sauf Famille / Home (ceci implique des manipulations supplémentaires).

II. Mise en oeuvre des restrictions

A. Prérequis

D’abord, on crée un compte Administrateur local protégé par mot de passe sur le poste de travail (seul compte autorisé à exécuter des tâches d’administration sur le poste). Ensuite, on crée un compte utilisateur local (protégé ou pas en fonction de la demande du propriétaire du poste) et on met ce compte dans le groupe local "Utilisateurs".

Pour cet exercice, l’administrateur du poste de travail s’appellera "Admin", et l’utilisateur s’appellera "Consultation2a". N’oubliez pas de les remplacer à chaque fois par des noms d’utilisateurs qui sont propres à votre environnement.

Commençons par brancher le périphérique sur l'un des ports USB du poste de travail pour être sûr qu’on y a effectivement accès pour le moment, avant d’engager les opérations de restriction.

Accès au stockage USB avant la mise en place des restrictions, depuis le compte utilisateur :

Accès au stockage USB avant la mise en place des restrictions, depuis le compte Admin :

B. Blocage des ports USB pour le compte utilisateur (non-administrateur)

On se connecte ensuite avec le compte Admin, on ouvre la MMC par la barre de recherche du menu Démarrer de Windows. Sinon, l'alternative consiste à utiliser le raccourci clavier « Windows + R » afin de saisir « mmc » dans la fenêtre Exécuter. Puis, on valide avec « oui ».

Une fois la console ouverte, on clique sur « Fichier » puis sur « Ajouter/Supprimer un composant logiciel enfichable ».

Ensuite, on clique sur « Éditeur d’objet de stratégie de groupe », puis sur « Ajouter ».

Une nouvelle fenêtre s’ouvre et on poursuit en cliquant sur « Parcourir ». 

Ici, on sélectionne l’utilisateur à restreindre par la stratégie (ici "Consultation2a") et on valide. Autrement dit, sélectionnez l'utilisateur qui ne doit pas pouvoir connecter de clés USB, disques externes, etc... sur la machine.

Une fois l’utilisateur sélectionné, on revient à la fenêtre précédente et on clique sur « Terminer ».

Enfin, on valide la stratégie.

On retourne à la fenêtre principale de la MMC pour démarrer la configuration de la stratégie comme suit :

  • Stratégie Ordinateur local/Consultation2a > Configuration utilisateur > Modèles d’administration > Système > Accès au stockage amovible

On peut désormais apercevoir les paramètres « Disques amovibles : refuser l’accès en écriture » et « Disques amovibles : refuser l’accès en écriture ».

On double-clique tour à tour sur les deux paramètres suscités pour les activer, puis valider comme sur les captures d’écran ci-dessous.

Nous bloquons l'accès en lecture :

Ainsi que l'accès en écriture :

Une image contenant texte, capture d’écran, logiciel, Page web

Description générée automatiquement

Une fois terminé, on enregistre la stratégie sous un emplacement au choix et bien sûr sécurisé pour une utilisation ultérieure, au besoin.

Désormais, on doit tester la stratégie ! Donc, on applique la GPO via une console CMD en exécutant la fameuse commande « gpupdate/force ».

C. Test de fonctionnement.

Une fois la stratégie appliquée, on voit qu’on a toujours accès aux dossiers et fichiers de la clé USB branchée sur le poste de travail lorsqu’on est connecté avec le compte Administrateur (Admin).

Une image contenant texte, capture d’écran, logiciel, Logiciel multimédia

Description générée automatiquement

Ce qui n’est cependant plus le cas une fois qu’on est connecté à l’aide du compte utilisateur standard (Consultation2a). On peut le voir à travers le message d’erreur « G:\ n’est pas accessible, Accès refusé ». La restriction s'applique correctement !

III. Conclusion

On vient de voir comment bloquer l’accès (Lecture/Écriture) à un stockage USB à un utilisateur précis sur un poste de travail Windows multi-utilisateurs ! Nous avons atteint notre objectif grâce à la configuration de la stratégie de groupe locale, par l'intermédiaire de la console MMC (Microsoft Management Console) de Microsoft.

Cette solution est pratique pour des restrictions de sécurité lorsqu’on n’a pas assez de moyen pour s’installer un contrôleur de Domaine Active Directory sous Windows Server. Ceci est utile aussi sur un poste de travail isolé.

Cependant, elle est accessible par défaut sur les éditions actuellement sous le support de Windows en édition Professionnel et Enterprise (Windows 10 et Windows 11). Pour le cas de l’édition Familiale, par exemple, il faudra encore activer des paramètres supplémentaires pour avoir accès aux GPO (car la fonction n'est pas disponible nativement).

The post Windows : comment bloquer les clés USB et les disques externes sur une machine locale ? first appeared on IT-Connect.

Fête des Pères : offrez une licence à vie Office 2021 Pro dès 27,25 € !

À la recherche d'un cadeau pratique pour la fête des pères ? Les licences à vie pour Microsoft Office 2021 Pro, proposées en promotion à partir de 27,25 € chez Godeal24, sont une solution idéale. Bénéficiez des dernières fonctionnalités de Microsoft Office à un prix avantageux pour offrir à votre père un outil essentiel pour ses activités quotidiennes.

L’article Fête des Pères : offrez une licence à vie Office 2021 Pro dès 27,25 € ! est apparu en premier sur Tom’s Hardware.

full

thumbnail

Ghost of Tsushima stabilise le FSR 3 et améliore la fluidité sur PC

Ghost of Tsushima sur PC vient de se mettre à jour. Le patch 4 du portage de Nixxes améliore la stabilité du jeu et la génération de frames du FSR3. Des corrections de bugs ont été apportées et le jeu devrait être compatible avec les CPU ne prenant pas en charge l’instruction AVX2.

L’article Ghost of Tsushima stabilise le FSR 3 et améliore la fluidité sur PC est apparu en premier sur Tom’s Hardware.

full

thumbnail
❌
❌