Endpoint Protection

Hi

we have many users who use USB Wireless device to connect internet and we want to block these devices by SEPM, so i can find Device ID but i found that every device that have own device ID like Dlink device with device ID like "usb\vid-2001" or "usb\vid-0CV" and also fujitdu USB wireless like "usb\vid-1371".

i would like to know how can i find class id of these devices instead of device id or any other solution that can be solve pur problem in organization.

we have SEPM 12.1.1205

You need to use a tool called devviewer. It is on the install dvd under tools. This will give you the hardware ID Check here https://www-secure.symantec.com/connect/downloads/devviewer-tool-helpful-application-and-device-control-find-hardware-device-id-and-guid

Here the official Kb where you can download it as well:

http://www.symantec.com/business/support/index?page=content&id=TECH103401

DevViewer --Tool helpful for Application and Device control to find Hardware Device ID and GUID https://www-secure.symantec.com/connect/downloads/devviewer-tool-helpful-application-and-device-control-find-hardware-device-id-and-guid

Have you tried the above comment? what is current status of your issue?

You can also find dev viewer on the systems which have SEP installed.

Navigate to C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Bin

and you may see DevViewer

Here is all possible class ID tht can be found on Windows

http://msdn.microsoft.com/en-us/library/windows/hardware/ff553426(v=vs.85).aspx

 

use special caution while blocking class ID..as the above class ID might be of generic USB device or Human Interface Device and blocking that will block many other things that u really dont want..

So from the above link verify what does that class id mean and always test your policies before applying it on production.