Video Screencast Help
Search Video Help Close Back
to help
New in the Rewards Catalog: Vouchers for "Symantec Technical Specialist" and "Symantec Certified Specialist" exams.

Unblock applications running from CDROM drives

Updated: 21 May 2010 | 7 comments
kalyan makkena's picture
0 0 Votes
Login to vote
This issue has been solved. See solution.

I have enabled policy to have applications from USB drives from  running, but the cdrom drives are also blocked from applications being running, can i have the settings to enable them.

Comments

AravindKM's picture
09
Nov
2009
1 Vote +1
Login to vote

Are tou completly blocked usb

Then try this
1. Open 'Application and device control' policy in Symantec Endpoint Protection Manager.
2. Click on the device control tab.
3. Under the 'blocked devices' section click the ADD button and select the USB option.
4. Click the ADD button under "Excluded from Blocking" and select, one by one, all of the other devices that use USB that should not be blocked (eg: pointing devices, keyboard, cameras, joysticks, HDD, etc. )
5. Click Ok to save the changes and assign policy.
 In step 4 you can select cdrom

Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind

kalyan makkena's picture
09
Nov
2009
0 Votes 0
Login to vote

i only blocked "Block

i only blocked "Block programs from running from removable drives" and i can read and write to cdrom drives but i cannot run an application directly from cdrom drives.

AravindKM's picture
09
Nov
2009
0 Votes 0
Login to vote

What is the exact policy you

What is the exact policy you are using?
Block applications running from removable devices? 

Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind

Rafeeq's picture
09
Nov
2009
0 Votes 0
Login to vote

Hi

You can try this document

How to block USB Thumb Drives and USB Hard Drives, but allow specific USB Drives in the Application and Device Control Policy in Symantec Endpoint Protection.

http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/b54beb2f46268ccc882574e80052960f?OpenDocument

Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq

AravindKM's picture
09
Nov
2009
0 Votes 0
Login to vote

Removable device includes

Removable device includes cdrom
Try the below doc
How to prevent programs from running by blocking the file extension types from removable drives. 

Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind

AravindKM's picture
09
Nov
2009
0 Votes 0
Login to vote

While creating the policy

While creating the policy  select only removable device only (Do not select cd/dvd rom)
If this post helped you to solve your problem pls mark it as a solution, if not pls revert back..

Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind

Vikram Kumar-SAV to SEP's picture
09
Nov
2009
0 Votes 0
Login to vote

Edit the policy Click on

Edit the policy
Click on Block programs from running from removable drives
highlight " *(enable drive Type) Click Edit

Uncheck CD/DVD ROM drives
 Click OK