Our agency uses SCCM and HPCA / HPSA for application deployment. Because of a recent virus attack that utilizes autorun.inf, we have created an Application & Device control policy for our SEP clients following this link: http://www.symantec.com/business/support/index?page=content&id=TECH104909
The policy works as expected, however now our deployment software is not able to install software on the clients. We can make exceptions for setup.exe or install.exe but that beats the purpose of having this policy enabled in the first place. What would be the suggested way of making sure that autorun.inf is blocked at the same time, we can still use our deployment software to manage installs on the client?