Troublshooting:HP LaserJet Pro P1102 and SEP 12 on Win XP SP3

[Shadi.A]

In my network All of the clients are win xp sp3 and have sep 12 AV.

I have closed USB cool disks with APP & Dev Control Policy. I mean I have just added the ID 'USBSTOR*' to the Block devices.

but I have Trouble with HP LaserJet Pro P1102 printers, every time the client system restarts the Printer which is connected by USB, becomes Disable in device manager. and I should login with administrator account and enable that.

I have also added the Printer Device ID in the Exception part of the block devices but it happens again.

Please friends, give me solution

Thanks alot.

[Migration User]

Hi use this tool and retrive hardware id.and exclude in policy.

https://www-secure.symantec.com/connect/downloads/devviewer-tool-helpful-application-and-device-control-find-hardware-device-id-and-guid

[Shadi.A]

As I mentioned, I have already used this tool and excluded the hardware policy but it does not work :(

[Migration User]

hi,

if you already set this setting so you can be contact to Symantec technical desk.

Contact Symantec Customer Care on 

http://www.symantec.com/support/assistance_care.jsp

OR 

Technical Support

http://www.symantec.com/business/support/contact_techsupp_static.jsp

 

Phone numbers to contact Tech Support:-

Regional Support Telephone Numbers:
United States: https://support.broadcom.com (407-357-7600 from outside the United States)
Australia: 1300 365510 ([phone] from outside Australia)
United Kingdom: [phone]

India: Toll-Free 000 800 4401 456 directly

IDD call: [phone]

[Migration User]

If I understand you correctly, you made a Device control rule with USBSTOR* as a "Blocked Devices" rule and the HP printer device ID as an exclusion for it.

I'm not a device ID expert, but it sounds odd that a laser printer device ID starts with "USBSTOR". Something like "USB\..." would be more logical.

Can you post a screenshot of your SEPM Device Control rule?

 

[Mithun Sanghavi]

Hello,

I agree with Greg above. 

If you could post the screenshot of the Device control policy, we may be able to figure out the issue.

The Symantec Endpoint Protection Manager (SEPM) console has a number of different hardware id strings defined already, for devices such as Scanners, Cameras, Infrared, Bluetooth, Modems, Smart Cards, Printers, which can be used to create hardware restriction policies.

Again, check this Article:

Symantec Endpoint Protection Device Control: excluding devices from blocking show inconsistent results

http://www.symantec.com/docs/TECH145804

Also, check this Thread:

 

https://www-secure.symantec.com/connect/forums/disabling-usb-drives

 

Hope that helps!!

[NRaj]

We faced similar issue.

Solution:

When you use dev viewer, you will find the following 3 devices.

HP EWS

HP Laser Jet

USB Printing Support

You have to exclude the device id for all these 3 devices. Only then it works. Let us know how this goes.

[NRaj]

If the above suggestions were relevent and helpful, you can mark the right one as solution and close the

thread. Thais may help others who are searching for similar issues. Thanks.