Endpoint Protection

 View Only

  • 1.  How to disable Mobile Devices from SEPM

    Posted Nov 12, 2014 06:03 AM

    Hi,

    I have blocked the USB Mass Storage Devices from SEPM console.

    BUT

    when the user pluggs in mobile phone (Android) this device is accessible no matter that use of USB Mass Storage Devices is blocked.

    how to block mobile devices ?



  • 2.  RE: How to disable Mobile Devices from SEPM



  • 3.  RE: How to disable Mobile Devices from SEPM

    Posted Nov 12, 2014 06:11 AM
    You need grab the device ID using devviewer and set up the block using that


  • 4.  RE: How to disable Mobile Devices from SEPM
    Best Answer

    Posted Nov 12, 2014 01:02 PM

    Have you tried blocking by vendor. like what Console admin says here

    class id is divide in 6 part if you can choose it till vendor then all device which are related to hp printer that is accessible and if you selected till model then same model printer is accessible, in your case you can choose till model because your sevice serial number getting change but other detail not because that is fixed by vendor

    below is the syntx and example

     

    <class>\<type>&<vendor>&<model>&<revision>\<serial number>
     
    <class>\<type><vendor><model><revision>\<serial number>
    Example
    SanDisk Micro Cruzer - USBSTOR\DISK&VEN_SANDISK&PROD_CRUZER_MICRO&REV_2033\0002071406&0
     
    Choose
    SanDisk Micro Cruzer - USBSTOR\DISK&VEN_SANDISK&PROD_CRUZER_MICRO*
     

     

    Link for guidance

    http://www.symantec.com/business/support/index?pag...

     

    https://www-secure.symantec.com/connect/forums/application-and-device-control-device-id-changes-when-connected-another-computer



  • 5.  RE: How to disable Mobile Devices from SEPM

    Posted Nov 18, 2014 02:18 AM

    thanks guys for response,

    i found in previous post, almost all device IDs for mobile phones. only one left. i could not find a prefix for windows phones.

     

     

    Android_ZTE Device: USB\VID_19D2*
    Android_Sony Device: USB\VID_0FCE*
    Android_Samsung Device: USB\VID_04E8*
    Android_Motorola Device: USB\VID_22B8*
    Android_LG Device: USB\VID_1004*
    Android_Huawei Device: USB\VID_12D1*
    Android_HTC Device: USB\VID_0BB4*
     


  • 6.  RE: How to disable Mobile Devices from SEPM

    Posted Nov 18, 2014 02:28 AM

    Thanks for providing the list i'm sure it would help many. So its all working now? able to block?



  • 7.  RE: How to disable Mobile Devices from SEPM

    Posted Nov 18, 2014 03:09 AM

    still testing Rafeeq,

    still could not find a prefix for windows mobile phones.

    Device: USB\VID_?????

    do u know?



  • 8.  RE: How to disable Mobile Devices from SEPM

    Posted Nov 18, 2014 08:10 AM

    Constantine,

    I dont have a windows phone ,cant check this setting, can you check here

    HKEY_LOCAL_MACHINE\CurrentControlSet\Control\USBFN\Configurations that includes their interfaces in the InterfaceList.

    http://dev.windowsphone.com/en-US/OEM/docs/Driver_Components/USB_registry_keys

     

    Value

    Type

    Owner

    Description

    idVendor

    REG_DWORD

    OEM

    The VID code for the device descriptor that is advertised to the host during enumeration.