i have one policy which blocks USB devices, and second policy which logs all activities written to USB devices (for those users who has right to use usb device).
in the second policy:
1."marked "Log files written to USB drives" option
2. assigned to those groups of users, who has right to use USB devices.
when i wanted to see logs of those users who transferred some files on USB, i received output (see below)...
there was said that more effective way for logging, will be use of wildcards *,:
Question:
Exaclty where i have to add this wildcard in policy?