Endpoint Protection

I need to block pretty much any USB storage device. Esp thumbdrives. I've had issues doing it by the book, so have put in a device for each brand or model and it's working except when I did HP - it seems to have killed the PRINTERS, too.
I need to block the HP deskjet card slots from taking up a drive letter, so disable them via SEP.
Can I make a device entry using this:
*USBSTOR\DISK&VEN_HP&PROD_OFFICEJET*
to prevent the HP printers from installing storage devices and taking a Windows drive letter?
Is that correct syntax?
When I tried to add "USP to the blocked devices, then added printers, scanners, human interface devices and so on to the exclusions, it blocked literally anything USB except mice and keyboards! Suddenly 100 printers, 40 scanners and a dozen cameras stopped working!
So I had to remove the block USP - the exceptions didn't seem to work, so it's back to one at a time, device by device as I discover them...........

Is it the same as the device ID with USB devices?

Sorry if i am wrong but u can Use the DevViewer.exe to find out the Device ID and then Exclude /Include accordingly.

I am using the same proceedure... step by step as they come...
getting the device instance ID... then adding it to the exclusion list...

@Ajitjha: do you have the DevViewer.exe  available?
hope I could get my hands on them apps..
many thanks...

It's on CD2

SEP-11-MR4\MR4-MP2\Symantec_Endpoint_Protection_11.0.4202_MR4_MP2_AllWin_EN_CD2\Tools\NoSupport\DevViewer

CD2, Tools, NoSupport, DevViewer

@ShadowsPapa: thank you.. will be checking the file... thanks..
guess i need to borrow the cds from the server admin...