Endpoint Protection

Hello

I have installed SEP on a thin client with windows XPE. It is now possible to block starting applications from an usb-device on the thin-client it self!!
I have also a terminal server win win 2k3 and also SEP is installed on this server. Also here I have blocked to run apllications from usb-devices connected to the local server.

I thought that this also would block apllications starting from an usb-device connected to the thin client. But it is still possible to start applcation from it.
Can someone tell me:
- is it possible to block applications starting from an usb-device, connected to the thin client, within a         rdp-session???
- when it is possible how can I do that??

Thanks!

yes it is possible to block any application. We use to block autorun.inf from usb drives. Just simple create a new policy on that

how to block USB thumb drive.


http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/b54beb2f46268ccc882574e80052960f?OpenDocument

here the quick reference on that.

Yes I know how to block an application from an usb-device.
That's not the problem. The problem is that the usb device is connected to a thin-client. And I want to block applications from the usb-device within a rdp-session started on that thin-client!!

Not sure what "thin client" you are using, but one draw-back of some is that in some cases, they treat USB as a drive, not a USB device.
There are cases where thin client simply doesn't treat USB the way Windows does, and thus there's no way to easily block.......
Thin clients are a mixed blessing, IMO - a lot of bad goes with the good............