Video Screencast Help
Search Video Help Close Back
to help
Not able to make it to Vision this year? Get a sampling in the Best of Vision on Demand group.

Block Pen Drive/USB flash drive through SEP 11

Updated: 21 May 2010 | 12 comments
Dream_Chaser's picture
0 0 Votes
Login to vote
This issue has been solved. See solution.

is there any way to block pen drive/ USB flash drive through SEP 11. but USB mosue and USB keyboard should be working.

thanks in advance.

Comments

Prachand's picture
30
Aug
2009
0 Votes 0
Login to vote

Title: 'How to block USB

Title: 'How to block USB Thumb Drives and USB Hard Drives, but allow specific USB Drives in the Application and Device Control Policy in Symantec Endpoint Protection.'

 http://service1.symantec.com/support/ent-security.nsf/docid/2008102008020548?Open&seg=ent

Title: 'How to block USB flash drives while allowing other USB devices.'

 http://service1.symantec.com/support/ent-security.nsf/docid/2008022822274348?Open&seg=ent

Prachand Kumar MCSE-2003 Symantec Technical Specialist (SCTS)

Dream_Chaser's picture
30
Aug
2009
0 Votes 0
Login to vote

thanks

thank you very much. its working.

one more question. if i want to give access to those bolcked device to a specific user is this possible???

Prachand's picture
30
Aug
2009
0 Votes 0
Login to vote

Then you have to install the

Then you have to install the SEP client in user mode and  configure the policy  accordingly.
Lets take an Example ,

You have an AD sync.
There are 2 user , User 1 and Admin one member of user group and the other of Admin In AD.
 And the Client is installed in the user mode.
On the same machine when user 1 logs in it will take the policy from the Group user( Block USB)
And if the admin logs in it will take the policy from the admin group to allow usb
You need to decide and configure the policy accordingly to each group.
 
Also AD sync and Client in User mode will be a great help

Prachand Kumar MCSE-2003 Symantec Technical Specialist (SCTS)

Dream_Chaser's picture
30
Aug
2009
0 Votes 0
Login to vote

Re:

I've no idea about AD sync. could u plz tell me every steps on this matter...

Tnx

Prachand's picture
31
Aug
2009
0 Votes 0
Login to vote

Check this

'Organizational Units from Active Directory in Symantec Endpoint Protection 11.0'
 http://service1.symantec.com/support/ent-security.nsf/docid/2007092721431648?Open&seg=ent

Prachand Kumar MCSE-2003 Symantec Technical Specialist (SCTS)

Dream_Chaser's picture
31
Aug
2009
0 Votes 0
Login to vote

Re:

Dear Prachand thank you very much. you really such a helpful person. your every topic is really helpful. everything working fine but some users report me that they cant print with their printer which are attached to their computer via USB cable. i've no idea why this is happen coz i've excluded printer and digital camera, plz help.

thank you.

Prachand's picture
31
Aug
2009
0 Votes 0
Login to vote

In some senarios Printers get

In some senarios Printers get  detected as the same GUID as USB drives in  application and device control. Please tell me which version of SEP you are using    See if this helps

Title: 'Network Printer does not receive print jobs after installing the Symantec Endpoint Protection (SEP) client'
 http://service1.symantec.com/support/ent-security.nsf/docid/2008040115074048?Open&seg=ent

 

Prachand Kumar MCSE-2003 Symantec Technical Specialist (SCTS)

Dream_Chaser's picture
31
Aug
2009
0 Votes 0
Login to vote

Re:

SEP Build 11.0.1000.1112
CMC/SNAC Build 11.0.1000.1091
SESM Build 11.0.1000.1049

Prachand's picture
31
Aug
2009
0 Votes 0
Login to vote

This issue has been resolved

This issue has been resolved in MR2, and you have MR1

Please upgarde to MR4 using

Migrating to Symantec Endpoint Protection 11.0 MR4
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008121712452848

Download  Symantec Endpoint Protection 11.0.4000 MR4 Maintenance Release

Prachand Kumar MCSE-2003 Symantec Technical Specialist (SCTS)

Bijay.Swain's picture
30
Aug
2009
0 Votes 0
Login to vote

Prachands link will surely

Prachands link will surely help you .I used  those documents  to block usb devices.

SameerU's picture
31
Aug
2009
0 Votes 0
Login to vote

Yes Prachand will surely help

Yes Prachand will surely help u

Bianko's picture
24
Nov
2009
0 Votes 0
Login to vote

 Hey Prachand thank you very

 Hey Prachand thank you very very much!!! And thanks to dream_chaser too for posting the question... Saved my a*s :D