F-Secure Device Control not blocking "write access" or "executable launching" on USB mass storage devices - F-Secure Community
<main> <article class="userContent"> <h3 data-version="4" data-article="000006258">Issue:</h3> <p></p><ul><li>User attaches a USB mass storage device but F-Secure Device Control does not block access to it.</li><li>Admin has disallowed writing to removable storage devices, this works correctly on USB thumb drives, however external USB disk drives can still be written to. How to ensure that writing to external disk drives is also blocked just like the USB thumb drives?</li></ul><h3>Resolution:</h3> <p><b>Note:</b> This article is relevant to all F-Secure products using Device Control: F-Secure Client Security 13 and 14, F-Secure PSB Computer Protection and PSB Server Protection. <br><br>In some cases external USB disk drives report themselves to Windows as standard drives, and due to this Device Control sees them as normal drives instead of external. In the event that USB thumb drives are blocked but not external disks, try the following:<br></p><p>Device Control has an advanced device type recognition logic which is disabled by default, but can be activated by registry manipulation:</p> <ol><li>Under the registry key <code class="code codeInline" spellcheck="false">HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\F-Secure Gatekeeper\Parameters</code> create a value of type DWORD with name <code class="code codeInline" spellcheck="false">EnableHotplugResolving</code> and set the value to 1</li><li>run cmd.exe with administrator priviledges </li><li>net stop fsulhoster</li><li>net stop "f-secure gatekeeper"</li><li>net start fsulhoster</li></ol> Test this out as it should resolve the problem. <p>Article no: 000006258</p> </article> </main>
