Device Control issues

ash1010's picture

Hi
We have application and device control enabled .The rule is set to block all USB , floopy and firewire.
We  have put in exclusion for certain devices (via device ID) , which works fine , so thats all ok.
One of the exclusion is to allow blackberry smartphone USB component , which is fine as well but the issue is that different blackberrys have different device IDs. I have tried using wild cards but that doesn't seem to work .

So how do I allow similar devices but with different device IDS easily , ie , without having to manually add in each device . The wild card after the common  portion of the device ID doesnt seem to work .

Thanks

sandip_sali's picture

Application and Device Control

You will have to add a device id if you wish you can try using the class id as well.

Adding a device id.JPG

Thanks & Regards

Sandip C Sali

Fatih Teke's picture

Second Group

Hello ash1010
I do not know this will good choice for you but i did it before.
You can create a new group for them. (like access USB devices) you can give access in this group members for use all devices.
Or you can create exclutes with devices ids as like sandip_sali said
Thanks
Fatih.

------------------------------------------
Everything works better when everything works together.

ash1010's picture

Hello , how do I find the

Hello , how do I find the class id ? WIll this class be unique to each device or product ?
How do  I add mutlipe similar type devices
example , i have a 20 blackberry and with ids
1.

USB\VID_0603&PID_00F2\5&1 etc 
2

USB\VID_0603&PID_00F2\5&2.. etc

how do I add mutliple similar IDS without having to add 20 of them manually ...

Fatih Teke's picture

wildcard

did you try to give access like this?
USB\VID_0603*
therefore you can give access all devices with start id USB\VID_0603
Thanks
Fatih

------------------------------------------
Everything works better when everything works together.

ash1010's picture

yes i did but it doesnt seem

yes i did but it doesnt seem to work

AravindKM's picture

 Run DevViewer.exe select the

 Run DevViewer.exe select the device and it
will give you guid (Class ID and window GUID is same). Add this to exclusion
list and try .. (I am believing class id for same model device is same not sure
still you can try)

 

ash1010's picture

cool , will give it a try .

cool , will give it a try .