How to create an Application and Device Control policy to allow Tally Dongle and block Pen Drives.
Last Updated October 08, 2018
Need to allow the software or application which uses Dongle, when the Application and Device Control (ADC) policy exits for blocking USB. Hard Rock software works on Dongle (a USB Device looks like Pen drive).
Allow : Dongle , Card Reader , USB Mice & USB Keyboards. Block : To block Pen Drives and External USB Hard Drive.
Go to client Machine.
Go to Device Manager - Human Interface Devices.
Copy Device ID of Dongle from Properties -Details
Copy Device ID of Card Reader from Properties -Details
Copy Device ID of USB Mice & USB Keyboards from Properties -Details
Paste the above 3 Device IDs on Note Pad.
Add all 3 Device IDs to the Hardware Devices list in Symantec Endpoint Protection Manager using Add a Hardware Device option in the Hardware Devices under Policy Components.
In the Symantec Endpoint Protection Manager console, open Application and Device Control in Policies tab
Click Device Control.
Under Blocked Devices, click Add
Select the Device ID of USB Mice & USB Keyboards, Click OK.
Under Devices Excluded From Blocking, click Add.
In the Device Selection window, select the Device IDs of the Card Reader and Dongle .
Creat a new group named Testing. Uncheck the policy inheritance of that group.
Move two clients to that group .
Assign the New Application and Device Control Policy to the Testing group.
Run Update Content under Run a command on the group option on the Testing group.
Check on the client machine to verify the policy is assigned and Symantec Endpoint Protection Client is updated with new Policy Serial number.
Verity the condition has been met.
Allow: Dongle, Card Reader , Mouse & Keyboard.
Block : USB Pendrive
OS of Symantec Endpoint Protection Manager server : Windows Server 2008 R2 64 bit OS of Symatec Endpoin Protection Client : Winows 7 SP1 32 bit / Windows XP SP3 32bit Symatec Endpoint Protection Client Version: 11.7; 12.x; 14.x
Imported Document ID: TECH170365
Subscribing will provide email updates when this Article is updated. Login is required to Subscribe