Endpoint Protection

I want to know details about this policy(as jpg).Why is it use for ? How to use it ?

Kindly Check this url.

For 12.1 Version, Please go through following article.

About application and device control:

Hi,

This policy is used to block some of the virus behaviours.

Such as some viruses directly executes their actions whenever you double click the attached removable storage.

This action will trigger the EXE files to execute directly on your machine which may be potentially harmfull.

it block programs from running from removable drives

check this link

http://www.symantec.com/business/support/index?page=content&id=TECH92172

This policy is to block autorun.inf which trigger suspicious executable files to infect system.

And it is recommeded to enable in all environment, we have configured the same.

Agree with Pete- It help to block the application access of Removable drives