Endpoint Protection

Good morning everyone,

I want to block usb flash drives for ALL users. However, sometimes users will need access to the usb flash drives just for one or two days. 

How can I accomplish this? What is your recommendation ? 

Can i make two groups ? One for block and one for allow? and when they need access to a usb flash drive, i can put a user or computer in the allow group for temporary access? 

See here:

Allowing or blocking devices on client computers

You cluld create two separate groups, one to allow another to block, or you could just add specific devices to the exclusion list. 

Good morning Brian,

Can you give me an example or be more specfic? Thank you sir!

The article I linked goes over the steps.

All excluded devices are added here in the policy

You're welcome.

thank you!!

I create and enable a policy to block USB flash drive. I assign it to a group that has one computer and the computer is online. I updated the policy on the computer too.  When I plug in a flash drive to that computer, SEM does not block the USB flash drive.

Is there anything else I need to look at?