any procedure to block MASS STORAGE DEVICES in UN-MANAGED SEP 11
No, this is not possible within SEP 11 unmanaged
Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.
with sep11? not really, SEP12 introduces hardware device control etc. You will be better off controlling access to mass storage devices via AD.
Please mark posts as solutions if they solve your problem!
create a group in sepm
create a device contol policy to block MASS STORAGE DEVICES apply to that group
Configure a liveupdate policy for tat group to reveive update only via symantec external liveupdate server. because those are unmanaged computer and by default liveupdate policy client will get update from sepm.
Create a custom liveupdate policy as suggested and assign to the group
Now create a unamanged client package and select the group tat we created and assigned custom policy.
deploy this package it will work without issues.
Note : Device control will not work in 64 bit computers as per product limitation
Your satisfaction is very important to us.If you find above information helpful or it has resolved your issue...please mark it accordingly :)