Block USB Drives
This should be a lot easier than I am making it.
I am trying to block all removeable USB drives except one. I've created an Application and Device Control policy and under the Device Control area I added "Disk Drives" to the Blocked Devices list.
Under the Devices to Exclude From Blocking I added the Device ID (WPDBUSENUMROOT\UMB\2&37C186B&3&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SDG&PROD_005M&REV_1.00#12345678900000001890&0#) of the particular USB Drive I want to allow. I assigned the policy to a group, moved a test machine into it, and it successfully blocks all the USB Drives I plug in, INCLUDING the drive listed in the "Exclude From Blocking" list.
I'm using SEP 12.1 RU1 and any help you can offer as to how to allow the device to work would be greatly appreciated.