Endpoint Protection

Hi ,

SEPM  version 12.1.6 MP1

https://support.symantec.com/en_US/article.TECH104800.html

I followed the instructions in the above link to block  read and write to  CD /DVD in Windows 7 and does not work. I even rebooted my workstation and I can still acces the files from the DVD. I have Application and Device Control feature enabled as a part of client package and deployed successfuly. I even enabled the policy to deny read and write to USB which is working perfect.

Please let me know if I am missing anything here.

Thanks,

Since SEP cannot block writing (known limitation in ADC), did the workaround provided not work?

Is anything showing in the Control log? Did you set the rule to production?

Thanks Brian.

I got little confused after step 5.

1) After step 5: After typing the Rule Set Name, under Rules named Rule 1 show by default has properties on the right pane and should it be left blank under "Apply this rule to the following processes".

2) On the step 8, Add the following process paths:

%SystemRoot%\SysWOW64\imapi2.dll
%SystemRoot%\SysWOW64\imapi.dll
%SystemRoot%\SysWOW64\imapi2fs.dll
%SystemRoot%\System32\imapi2.dll
%SystemRoot%\System32\imapi.dll
%SystemRoot%\System32\imapi2fs.dll

Should the above paths added under  "Apply to the following files and folders"?

I am using SEPM 12.1.6 mp1

Thanks,

Correct. This is exactly where you would add them.

Step 5, under "Apply this rule to the following processes", should it be left blank?

Thanks,

That's step 9 where you add those process paths.

Thanks Brian

You're welcome.