Endpoint Protection

Hi,

We are facing a common issue in our Lenovo Think Center Machines, that all the USB ports of machines get blocked and we are unable to access keyboard and mouse.

We are using symantec 11.06 MP2, when we tries to enable those ports we are not be able to do that and as we stop Symantec services by taking remote of the machines we are able to enable those ports, kindly take a look on the issue.

hi Sonday,

try this download.

https://www-secure.symantec.com/connect/downloads/policy-block-usb-exclude-keyboard-and-mouse

How to block USB devices while excluding mouse and keyboard?

Problem

How to block USB devices while excluding mouse and keyboard?

Solution

1. Block USB devices

a. Login into the SEPM console.

b. Click Policies, then click Application and Device Control under View Policies.

c. Select the Application and Device Control policy which needs to be modified on the right-hand side.

d. Click Edit the Policy under Tasks.

e. In the pop-up window, click Device Control.

f. In the Blocked Devices section, click the Add... button.

e. Select USB in the next pop-up window.

g. Click OK to confirm.

USB will be added into Blocked Devices section.

2. Exclude mouse and keyboard from being blocked.

a. In the Application and Device Control policy pop-up window, Add Human Interface Devices into the Devices Excluded From Blocking section.

3. Assign the policy to the groups.

Hi Kashish,

Already I done, but still the problem is there & this issue am facing on newly puchased Lenovo Think Center Machines.

Hi Sonday,

You can use DevViewer tool and add USB deivce Exclude policy

http://service1.symantec.com/SUPPORT/ent-security.nsf/ppfdocs/2007511906325898?Open&dtype=corp&src=&seg=&om=1&om_out=prod

Hi Kashish,

My keyboard,mouse & network card is blocked...only on Lenovo Think Center Machines....

hi Sonday,

you can say if you have take remote and stop the SEPM service after you kayboard and mouse are working.

So i am talk to you use DevViewer tool and found kayboard and mouse hardware id and Exclude policy tab in your usb device block policy.

Yeah I told, but we are unable to take remote because the network also disabled...

ok.

Are you able to login in safemode with networking try this.

if yes Remove the SEPM client and recreate policy and create installation package and check again.

Yeah I tried, but unable to work USB keyboard in safemode also...

hi Sonday,

As per my Knowledge SEPM policy not apply to safemode.

kindly check any another device block are not install in system.

Mouse are working or not in safe mode ?

Have you check the USB registry key and Windows USB driver permission?

Hi Sonday,

You log the case with symantec suport they will having the solution for your issue.

Hi Dcomp,

Thanx to Suggest...