Endpoint Protection

 Hi! Our company uses SEP 12.1 and the more my IT co-workers and I talk about it, we feel we may need to block users from being able to freely use jump drives and cd/dvd drives, but I am confused as to how you can do this, but still give permission to use these drives when really needed. We don't want users bringing in there personal jump drives or cd/dvds and infesting the computers with junk or even viruses

I was thinking it would be great if within SEPM we could configure it to request a admin password when a user tried to access a thumbdrive or cd/dvd media. We already have Auto run disabled by a group policy.

Could some of you kindly give me info about how you may have this set up for your users? At this point we are just look for info before changing settings.

See -

How to block USB Thumb Drives and USB Hard Drives, but allow specific USB Drives in the Application and Device Control Policy in Symantec Endpoint Protection.

http://www.symantec.com/business/support/index?page=content&id=TECH106304&locale=en_US

How to block USB flash drives while allowing other USB devices.

http://www.symantec.com/business/support/index?page=content&id=TECH104299&actp=search&viewlocale=en_US&searchid=1288975028344

For your idea of the user requesting a password, you can submit the idea for possible inclusion in a future release of SEP.

https://www-secure.symantec.com/connect/node/add/idea?add_context=691

Pls find the link. Hope it help to you.

https://www-secure.symantec.com/connect/downloads/disable-cddvd-writer-system-through-sepm

https://www-secure.symantec.com/connect/downloads/sep-policy-block-usb-and-exclude-keyboard-and-mouse

Hi,

Blocking CD/DVD/USB

Login to the SEPM console machine and select the clients tab 

Select the group and select the  Application and Device control policy and 

check the box for usb block and cd\dvd blocking and  right click on client  update once and try.

you also need to restart once for the client machine to have the ADC policy applied