Endpoint Protection

Hi All,

Recently I have blocked the access of all storage devices & smart phones though Symantec. Now I also want to disable the USB charging of phones.

Can I block the block the USB charging through Symantec ???? If yes then request you to please share the solution. 

OS platform is window 7.

Following these steps:

http://www.symantec.com/docs/TECH175220

...it should block the device entirely.

You are require to add the device id of that smart phone to stop charging

https://www-secure.symantec.com/connect/articles/how-block-or-allow-devices-symantec-endpoint-protection

I do not think that its possible, a computer does not recognize iphone ( for ex) if itunes is not installed.

https://www-secure.symantec.com/connect/forums/enable-iphone-charging#comment-7381841

Charging of USB devices cannot be blocked by SEP. SEP can only decide if the device should be blocked or allowed.

Since Windows Vista, to supply power to that USB port or not is decided by the OS. Not SEP.

In your case, Windows 7, the OS supplies the power to USB port by default. This can't be blocked using SEPM.

Check the note at the following link: http://www.symantec.com/docs/TECH175220

Hi Sayyed,

Thanks for the information you have provided.... as i have already mention above i had successfully blocked all storage device/phones. But facing one problem, USB headsets are also getting blocked due to this. As my company is bpo, access of usb headset is necessary.. I have attached snap shot of my policy applied on SEP.

Kindly suggest.

Since its a USB Headset you it will not fall under HID devices, and will carry a different class ID, so use Devveiwer to capture the Class/Device ID and add it to the excluded list of device so that it starts to work.

Use DevViewer to find hardware device IDs for Device Blocking in Endpoint Protection

Not all I/O devices fall under the class ID of HID. Even some multimedia keyboards doesn't use the class ID of HID devices.

In such cases, the particular device need to be unblocked using the devices ID. Please follow the instructions at the link below on how to use the device viewer to find the device ID of a device and unblock it.

http://www.symantec.com/docs/TECH175220