How to restrict access to information on a laptop that is outside the controlled area?

Question

Encryption

Good afternoon.
In the branch of the company, information processing is carried out on laptops.
The task is to restrict access to information if the laptop leaves the office.
I'm thinking of somehow becoming attached to the access control system (the employee went to the office, access is open) or the company's local network, but I did not find such solutions. Are there any SecretDisk equivalents that can be used for this?

Answer 1

Thanks to all. Chatted with Aladin. It is said that in the SecretDisk Enterprise version, it is possible to prevent users from working with encrypted resources without an online connection to the management server. Such partitions outside the corporate network cannot be opened even by legitimate users. We will try.

Answer 2

maybe I'll say garbage, but I would put RDP on the laptop in autoload on full screen, and I would screw the "server" where it is more convenient, if the communication channels allow. As a last resort - in a separate office of the same branch.
there should not be anything valuable on the laptop itself.
well and standard dances with the user cut down in the rights.

Answer 3

There is also Dallas Lock 8.0-K. And SecretNet 7. Judging by the statistics, the first one is more reliable and both have FSTEC certificates. But this is if you need to delimit the access rights to the information itself. And if the task is to protect against unauthorized access, then I think it’s worth looking for some SDZ for laptops in the form of separate pieces of iron (all sorts of tokens there).

Answer 4

ACS solutions are expensive and difficult to operate. Alas, a laptop is an alienable device. A more or less competent techie will do anything with him.
Make the task bigger. Do you need to take laptops out of work? If yes - it is necessary to work with conf. data?
If this is a big boss, against whom you can’t argue, just put up with it.