Endpoint Protection

I am using Symantec Enpoint Protection Manager 11, We basically disable all USB for all client. But in some scenario we need to enable some usb device for particular client machine. But in symantec if any device id has been enabled that will enabled for all client, I need to bind the device id for specific machine. Any suggestion would be appreciate. thanks in advance.

With Regards

Prashanth C

Hi,

If you have apply policy in group you can't exclude specify sep machine .

You need to create other sep group and move machine.

Hello,

Incase, you do not want a SEP Client machine to have the ADC policy, please do not apply the policy to that group where the machine is residing OR move that specific client to a different group.

Policies are applied to the groups which get reflected the client machines reporting to the group.

Hope that helps!!

Agree with above comment, Policy is work on the Device ID and Class ID not able to bind the system base. Device will work on all of that system which are allocated on that group where policy applied. You nee to create the Group for this paritcular work.

Thanks for all, I holding 300+ client which is reporting to the manager console. If i'm going to enable each user a device id then i need to create 300 groups?

Better way is that you can create a single test group and move the client as per client requirement.

hi,

Check this thread

https://www-secure.symantec.com/connect/forums/exception-user-applied-policy

Thanks to all, Any how let me try but for enabling device id for few client it can be done and it can be maintained but when it grows huge we can't keep on creating policy's for enabling, better way for doing this, it should bind with MAC address or some system info.

Thanks for your response, Thank you.

With Regards

Prashanth C