Endpoint Protection

 View Only
  • 1.  block MASS STORAGE in UN-MANAGED SEP

    Posted Nov 20, 2012 08:36 AM

    any procedure to block MASS STORAGE DEVICES in UN-MANAGED SEP 11



  • 2.  RE: block MASS STORAGE in UN-MANAGED SEP

    Posted Nov 20, 2012 08:48 AM

    No, this is not possible within SEP 11 unmanaged



  • 3.  RE: block MASS STORAGE in UN-MANAGED SEP

    Posted Nov 20, 2012 08:48 AM

    with sep11?  not really, SEP12 introduces hardware device control etc.  You will be better off controlling access to mass storage devices via AD.



  • 4.  RE: block MASS STORAGE in UN-MANAGED SEP

    Posted Nov 20, 2012 11:24 PM

    yes its possible.

    • create a group in sepm 

    • create a device contol policy to block MASS STORAGE DEVICES apply to that group

    • Configure a liveupdate policy for tat group to reveive update only via symantec external liveupdate server. because those are unmanaged computer and by default liveupdate policy client will get update from sepm.

    • Create a custom liveupdate policy as suggested and assign to the group

    • Now create a unamanged client package and select the group tat we created and assigned custom policy.

    • deploy this package it will work without issues.

     

    Note : Device control will not work in 64  bit computers as per product limitation