On group in setting polict following image .  i need to block storage volume and can use usb device such as Scan , Printer all-in-one(Print ,scan).

But now client can use pinter all-in-one and can use usb storage device also.

Please help to fix problem

Enpoint version 11
 

Please go thru these articles:

Block or allow devices in Endpoint Protection

How to block USB flash drives while allowing other USB devices.

I think storage volume device cannot work !!! for blocking
 

You can used DevViewer --Tool and find storage device id and block id

Use DevViewer to find hardware device IDs for Device Blocking in Endpoint Protection

https://support.symantec.com/en_US/article.TECH103401.html

I use wildcards: device id for block USB Storage but cannot block apple device

If it is tried on 64 bit system then policy cannot work in 11.x. Also 11.x version has EOL. You are require to upgrade your version in 12.1.6

Check these article and understand the process

Symantec Endpoint Protection 11.0.x End of Support Life

• Article: TECH226804
• Updated: April 30, 2015
• Article URL: http://www.symantec.com/docs/TECH226804

Symantec Endpoint Protection 11.0 compatibility with 64-bit platform

• Article: TECH102143
• Updated: December 3, 2010
• Article URL: http://www.symantec.com/docs/TECH102143

Upgrade or migrate to Symantec Endpoint Protection 12.1.6

• Article: TECH230601
• Updated: May 28, 2015
• Article URL: http://www.symantec.com/docs/TECH230601

https://www-secure.symantec.com/connect/blogs/new-release-symantec-endpoint-protection-1216-now-available

https://www-secure.symantec.com/connect/forums/symantec-usb-disable

are you using SEP 11 version still ?

On January 5th, 2015, Symantec Endpoint Protection version 11.0.x will reach end of support life. Virus definitions and security updates will cease to be published to LiveUpdate and general support for the product will no longer be provided.

The initial end of support life date was originally scheduled for January 5th, 2014. All customers were provided a complimentary extension. No further extensions will be provided.

Symantec Endpoint Protection 11.0.x End of Support Life

https://support.symantec.com/en_US/article.TECH226...

See this Elisha articles

How to block or allow device's in Symantec Endpoint Protection

https://www-secure.symantec.com/connect/articles/how-block-or-allow-devices-symantec-endpoint-protection

I use SEPM V11  on WIndows 2003 x86

My client windows x86

I use SEPM for Network access control and Device control only don't have antivirus.