Community
User Guides
Support
Community
Help Forums
English Forum
General
About our Community
General Discussion
News and Feedback
Products
F-Secure SAFE
F-Secure FREEDOME
F-Secure KEY
F-Secure SENSE Router
F-Secure ID PROTECTION
Other products
Beta programs
Feature Requests
Finnish Forum (Tukifoorumi)
Tuotteet Kotiin
F-Secure SAFE
F-Secure FREEDOME
F-Secure KEY
F-Secure SENSE Router
F-Secure ID PROTECTION
Muut tietoturvatuotteet
Support Articles
Language
English
Suomi
Deutsch
Français
日本語
Svenska
Dansk
Italiano
Nederlands
Norsk
Polski
中文 (繁體)
Products & Services
F-Secure TOTAL
F-Secure SAFE / Internet Security / Anti-Virus
F-Secure FREEDOME
F-Secure KEY
F-Secure SENSE Router
F-Secure ID PROTECTION
Other products
Common topics
User Guides
Support
Login
|
Register
F-Secure Device Control not blocking "write access" or "executable launching" on USB mass storage devices - F-Secure Community
<main> <article class="userContent"> <h3 data-version="4" data-article="000006258">Issue:</h3> <p></p><ul><li>User attaches a USB mass storage device but F-Secure Device Control does not block access to it.</li><li>Admin has disallowed writing to removable storage devices, this works correctly on USB thumb drives, however external USB disk drives can still be written to. How to ensure that writing to external disk drives is also blocked just like the USB thumb drives?</li></ul><h3>Resolution:</h3> <p><b>Note:</b> This article is relevant to all F-Secure products using Device Control: F-Secure Client Security 13 and 14, F-Secure PSB Computer Protection and PSB Server Protection. <br><br>In some cases external USB disk drives report themselves to Windows as standard drives, and due to this Device Control sees them as normal drives instead of external. In the event that USB thumb drives are blocked but not external disks, try the following:<br></p><p>Device Control has an advanced device type recognition logic which is disabled by default, but can be activated by registry manipulation:</p> <ol><li>Under the registry key <code class="code codeInline" spellcheck="false">HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\F-Secure Gatekeeper\Parameters</code> create a value of type DWORD with name <code class="code codeInline" spellcheck="false">EnableHotplugResolving</code> and set the value to 1</li><li>run cmd.exe with administrator priviledges </li><li>net stop fsulhoster</li><li>net stop "f-secure gatekeeper"</li><li>net start fsulhoster</li></ol> Test this out as it should resolve the problem. <p>Article no: 000006258</p> </article> </main>