Device Control USB not getting blocked

ITSM

Hi,

I'm trying to block USB storage devices, like USB and Smartphones but it's not working.

Can you tell me how to block these devices, so that employees can't use their personal USBs and Smartphones to store their personal data on the work computers?

Jamesch

Hi ITSM

 

You may need to block it using Hardware ID class. Some USB devices have different classes.

 

You can limit or block access permissions for removable drives using Device control. Refer to the following link for instructions:

• Limiting access permissions for removable drives
• Blocking device access using predefined rules
• Getting Hardware ID for a device

Note: Device control can only be configured from the Policy Manger or PSB Portal (Profile editor). There is no local configuration user interface.

ITSM

Can you tell me the USB class for Smartphone connection via usb cable on work PC, I'd like to know how to block that. 

Thank-you.

MonikaL

Hi ITSM,

 

To block/disable mobile phone storage access via USB cable in Policy Manager 14.x using Device control, you need to block the following device classes.

 

Add a device access rule as below:

 

Display name: Mobile Phone storage
HardwareID: USB\Class_FF
Access level: Blocked

 

Repeat this rule with the below mentioned device classes to block all smart phones:

 

HardwareID: USB\Class_00
HardwareID: USB\Class_08
HardwareID: USB\Class_02
HardwareID: USB\Class_EF

Regards,
Monika

ITSM

Can you tell me please does these classes include wireless keyboard and mouses and barcode scanners, because most of the PCs I manage with Policy Manager have Barcode Scanners and wireless keyboard and mouses.

Thanks in advance.

MJ-perComp

Check this link for additional classes to block:
https://docs.microsoft.com/en-us/windows-hardware/drivers/install/system-defined-device-setup-classes-available-to-vendors

M.