Block USB Policy is not working
Updated: 16 Feb 2012 | 4 comments
This issue has been solved. See solution.
hi,
i migrated some clients from 11.0.6 to 11.0.7 also i moved "Disable USB" policy on new SEPM server...
i tried to test it on my own pc...
i moved my client pc from "Enable USB" to "Disable USB" group... i can still access the usb device...
also i checked that client has assigned new policy (i checked it with policy numbers).
any ideas?
Discussion Filed Under:
Comments
did you restart the client
did you restart the client machine after the policy been applied. becuase it needs atleast one start after new ADC policy been updated.
Cheers!
Pete
Help Link: http://www.symantec.com/business/support/overview.jsp?pid=54619
production mode
It seems you have forgotten to switch the "Block writing to USB files" ruleset to "Production". In your policy it's still in Test mode.
"Thumbs up" to the above
As Pete mentioned, the SEP Client can sometimes request a reboot to enabled the A&DC functionality. This will normally however display a notification/prompt when it is required, is it possible you missed it?
Another thing to consider, and something I've noticed happens fairly often, is that when Admins test out the A&DC functionality on their own machines, it doesn't work because Admins have better hardware. Specifically, Admins tend to have 64bit OS machines, which cannot run A&DC from SEP11 (works for both 32bit and 64bit on SEP12.1).
BTW, your policy seems a little odd, in that there should be no need to allow HCI devices if you're only blocking USB Storage...
Oh, and of course ensure you've got the A&DC component installed, etc...
thanks guys for help...
thanks guys for help...
Would you like to reply?
Login or Register to post your comment.