Hi,
Let me summerize your problem and then a solution.
Problem- You need to block USB, Mass storage, External Disks but want to keep open access for
Mouse, Keyboards. You want to implement this on a perticular group.
Solution:
1. Create a group in SEP
2. Click on the Group Name and navigate to Policies Tab.
3. Uncheck the option from "Inherit policies and Settings from Parent Group"
4. Set all other policies as per your requirements.
5. Click on 'Application and Device Control Policy' and choose to Create a Non-Shared Policy Copy.
6. Click on 'Device Control' Tab on the left side
7. Choose devices that you want to block in first part. ( USB, Camera, Flash Drive, Memory Cards,etc)
8. Choose the devices that you want always opne under UNBLOCK catagory. (HID devices)
- Please make sure you dont block IDE devices, Disk Drives else all your laptops in that catagory will not
be able to boot with the drives blocked error - BLUE DUMP.
9. Most IMP - Move all the clients to this group and apply all the tailor made policies to the group and
see if you can see the latest policies at the client end and check if these works well.
Please check this and do let me know for any queries.
Thanks,
-PrabhakarJ