Video Screencast Help


Created: 20 Nov 2012 | 3 comments

any procedure to block MASS STORAGE DEVICES in UN-MANAGED SEP 11

Comments 3 CommentsJump to latest comment

ᗺrian's picture

No, this is not possible within SEP 11 unmanaged

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

Alex_CST's picture

with sep11?  not really, SEP12 introduces hardware device control etc.  You will be better off controlling access to mass storage devices via AD.

Please mark posts as solutions if they solve your problem!

Mohan Babu's picture

yes its possible.

  • create a group in sepm 

  • create a device contol policy to block MASS STORAGE DEVICES apply to that group

  • Configure a liveupdate policy for tat group to reveive update only via symantec external liveupdate server. because those are unmanaged computer and by default liveupdate policy client will get update from sepm.

  • Create a custom liveupdate policy as suggested and assign to the group

  • Now create a unamanged client package and select the group tat we created and assigned custom policy.

  • deploy this package it will work without issues.

Note : Device control will not work in 64  bit computers as per product limitation

Mohan Babu

+91 9884382160

Your satisfaction is very important to us.If you find above information helpful or it has resolved your issue...please mark it accordingly :)