any procedure to block MASS STORAGE DEVICES in UN-MANAGED SEP 11
No, this is not possible within SEP 11 unmanaged
with sep11? not really, SEP12 introduces hardware device control etc. You will be better off controlling access to mass storage devices via AD.
create a group in sepm
create a device contol policy to block MASS STORAGE DEVICES apply to that group
Configure a liveupdate policy for tat group to reveive update only via symantec external liveupdate server. because those are unmanaged computer and by default liveupdate policy client will get update from sepm.
Create a custom liveupdate policy as suggested and assign to the group
Now create a unamanged client package and select the group tat we created and assigned custom policy.
deploy this package it will work without issues.
Note : Device control will not work in 64 bit computers as per product limitation