Altiris does offer some monitoring for servers, but I don't believe it will easily track the two topics you have listed. It's designed to track thresholds and provide alerts. Symantec does offer Control Compliance Suite (formally Bindview) which is very comprehensive. For locking down the endpoints, that is also a Symantec product, part of SEP or endpoint protection (I think). Altiris has a similar product, Removable Storage Security Solution, but that is EOL at the end of the month.