Endpoint Protection

good

I am currently implementing policies USB lock, and I have excluded several
devices,

but are still blocked by reviewing the console log I get the following message:

Device Manager Message Plug in the device again or restart to enable the device.  

I appreciate any help

check this article

http://www.symantec.com/business/support/index?page=content&id=TECH106304

Hello,

What version of SEP 11.x have you installed?

Check these Threads:

https://www-secure.symantec.com/connect/forums/block-or-not-block-why-it-so-hard-2

https://www-secure.symantec.com/connect/forums/how-bypass-usb-debuggers-usb-disable-category

Hope that helps!!

If it is easy then can you attach your policy.

As per your words you have blocked several devices but not all.

Hope that log message will be genrated for the different device which you have not include in it.

Try the attach forum to block the USB

https://www-secure.symantec.com/connect/forums/create-policy

Have you check that system manually to attach your device which you have mention in block?

Attach link help to block the USB device

https://www-secure.symantec.com/connect/downloads/policy-block-usb-exclude-keyboard-and-mouse

Try to test first on test group move some systems in test group where you have this problem. If it success then change it in production

These would help

http://www.symantec.com/docs/HOWTO55033

http://www.symantec.com/docs/HOWTO55452

use the below link

How Symantec Endpoint Protection Device Control processes Windows device GUIDs and device IDs.

http://www.symantec.com/docs/HOWTO60964

DevViewer - a tool for finding hardware device ID for Device Blocking in Symantec Endpoint Protection

http://www.symantec.com/docs/TECH103401

Hope it help you

Have you tried the attach link?