Endpoint Protection

Hi All,

How to block a USB Wireless mouse and Keyboard? We cannot block by HID class as the wired USB mouse also using HID as well. Please advice.

How is the wired mouse using the same Device ID as the wired? This what is used to block devices.

It's working as designed. The Human Interface Device class should match all mice, keyboards etc. Its purpose is to exclude these devices from blocking (e.g. if you block the USB class).

In your case you should block the wireless mouse and keyboard by using their individual device IDs which you have to identify first. If you have to block a lot of mice/keyboards, it may be possible to use device IDs with wildcards.

See these articles/whitepapers:

Block or allow devices in Endpoint Protection

Symantec Endpoint Protection 11.0 GUIDANCE DOCUMENT (can still be used, nothing changed since 11.0)

Hi,

I have workaround and found a most easiest way to do this. Block all by using HID class and only enable the wired mouse and keyboard by using wirldcard device ID in the enviroment. So that only particular model of keyboard and mouse can be use.