Endpoint Encryption

Im trying to set up an exclusion for a USB device so files written to it are not encrypted.

I'm looking a devveiwer but where and what is the device Vendor ID and Product ID?

I have found this line

[device id]: USB\VID_0BC2&PID_2300\2GH29HC4____
 

which i believe shows it but which bits do you put into the Config?

Also I am trying to do this via GPO after install an MSI in which it is not selected.  Hopefully this wont be the issue!

Devviewer for SEP doesn't expose the Vendor and Product Fields that the exclusion list is looking for, but you can find those using something like usbview from the Debugging Tools for Windows download from Microsoft. Check it out below:

http://www.microsoft.com/whdc/devtools/debugging/default.mspx

The SEE Device Control Auditor would also work for this if you have the DC product, but if not the Windows tools work fine. Just locate the device and copy the last four digits (after the "x") and enter them in your exclusions list and you should be fine. It won't matter if you apply this via GPO or define it in your initial client installation file creation process.