ADC policy is not working on some clients, how to fix this issue?

What is your SEPM/OS version?

How many clients have same issue?

Clients are online/offline?

Ver. 11.0.7 Os Window 7

same issue in 12 clients.

Clients are online.

Do you have all the components installed? Whats the policy you have configured? Did you check the policy serial number on the clients?

If your clients are of 64 bit then ADC policy not be work in 11.x. You can upgrade your version in 12.x for ADC policy.

Application and Device Control policies in Symantec Endpoint Protection 11.0 are not applied to 64 bit clients

Symantec Endpoint Protection 11.0 compatibility with 64-bit platform

12.1.4.1a is the latest supported version

Symantec Endpoint Protection 12.1.4.1a is now available

https://www-secure.symantec.com/connect/blogs/symantec-endpoint-protection-121-release-update-4-maintenance-patch-1a-121-ru4-mp1a-english-ha

Upgrading or migrating to Symantec Endpoint Protection 12.1.4 (RU4)/12.1.4a (RU4a)

http://www.symantec.com/business/support/index?page=content&id=TECH211821

Yes all component install. Block the usb policy configured. Policy is updated.

Let me check the OS is 32 bit or of 64 bit.

These clients are reported on that group where policy applied?

Match the policy serial number on client or manager.

Viewing the policy serial number

• You should check the policy serial number on the client to see if it matches the serial number that appears in the management console. If the client communicates with the management server and receives regular policy updates, the serial numbers should match.
  
  If the policy serial numbers do not match, you can try to manually update the policies on the client computer and check the troubleshooting logs.
  
  To view the policy serial number in the management console
  • 1. In the management console, click Clients.
    2. Under "View Clients", select the relevant group, and then select the Details tab.
  
  The policy serial number and the policy date appear at the bottom of the details list.
  
  To view the policy serial number on the client
  • 1. On the client computer, in the client user interface, click on the Help and Support button, select Troubleshooting.
    2. In the Management section, look at the policy serial number.
  
  The serial number should match the serial number of the policy that the management server pushes to the client.

Added the Device ID in the SEPM? did you verify the USB device ID is same as its in SEPM console

or you are using USBSTOR to block it

http://service1.symantec.com/SUPPORT/ent-security.nsf/ppfdocs/2007511906325898