Endpoint Protection

 View Only
Expand all | Collapse all

internal drives disabling after blocking USb

  • 1.  internal drives disabling after blocking USb

    Posted Oct 31, 2013 08:13 AM
    Hi, I blocked USB drives with device control policy.but after blocking USB drives, system local/internal drives like D drive also disabling/disappearing . In that group , 100 systems are there . All are showing same thing. SEPM Version is 12.1.2. By default all those drives are logical drives. Please suggest on this. Regards Santhosh


  • 2.  RE: internal drives disabling after blocking USb

    Posted Oct 31, 2013 08:24 AM

    How are you doing the blocking?  It sounds as if you're blocking either the "Storage Volumes" or "Disk Drives" class, in which case this is expected behaviour.

    You might have better luck creating a Hardware Device with the below Device ID and blocking that instead:

    USBSTOR\*



  • 3.  RE: internal drives disabling after blocking USb

    Posted Oct 31, 2013 08:50 AM

    try this method

    How to block USB Thumb Drives and USB Hard Drives, but allow specific USB Drives in the Application and Device Control Policy in Symantec Endpoint Protection.

     

    http://www.symantec.com/business/support/index?page=content&id=TECH106304



  • 4.  RE: internal drives disabling after blocking USb

    Posted Nov 01, 2013 01:27 AM

    Hi

    Whether these drives are logical drives

    Regards

     



  • 5.  RE: internal drives disabling after blocking USb

    Posted Nov 01, 2013 02:06 AM

    We are using symantec EP v12.1.2 

    We are facing some issues in blocking the USB devices , if we block storage volumes in blocked device in device control policy, all the users using symantec clients blocks the internal disk drive (example D:/ ,E:/ but it excluding C:/ drive ...

    Our requirement is to block the USB drives and external hard disk..

     

     



  • 6.  RE: internal drives disabling after blocking USb

    Posted Nov 01, 2013 02:19 AM

    Hi

    Put USB in block list and put Storage volumes in exclusion list

    Sometimes in SEP 12.1.2 it detectes other drives i.e D: and E: as logical drives which are detected in SEP 12.1.2 as USB

    Regards

     



  • 7.  RE: internal drives disabling after blocking USb

    Posted Nov 01, 2013 02:24 AM


  • 8.  RE: internal drives disabling after blocking USb

    Posted Nov 01, 2013 05:27 AM

    Hi

    Can you please update on the provided solution

    Regards

     



  • 9.  RE: internal drives disabling after blocking USb

    Posted Nov 01, 2013 09:31 AM
    Yes. These are logical drives. Hp systems inbuilt os with one drive came by default. We created/shrink one more drive. Please suggest on this.


  • 10.  RE: internal drives disabling after blocking USb

    Posted Nov 01, 2013 09:46 AM

    Can you tell us what you've tried so far?  For instance, have you tested out replacing the "Storage Volumes" block with the device ID (USBSTOR\*) block I mention in my first post?

    Alternative options:

    • Replace "Storage Volumes" block with "Disk Drives" block
    • As it is a standard HP build, find the Device ID of the logical disks using DevViewer and add appropriate exclusions


  • 11.  RE: internal drives disabling after blocking USb

    Posted Nov 02, 2013 01:05 PM

    Hi

    Can you please update on the solution provided

    Regards

     



  • 12.  RE: internal drives disabling after blocking USb

    Posted Nov 04, 2013 10:26 AM

    I tried to give exclusion with device Id. But still issue is not solved.

     

    Planning to Upgrade to 12.1.4..



  • 13.  RE: internal drives disabling after blocking USb

    Posted Dec 18, 2013 09:26 PM

    Any solutions to this? im experiencing the same issue.