Endpoint Protection

If put a policy in place to lockdown USB drives on machines but add exceptions for mice, keyboards, and printers and someone plugs a USB device into a printer which has a USB port, will it be possible to get the USB drive to somehow work on the PC, even with the policy in place? I don't want users to somehow figure this out and still be able to use a USB drive. While this will be a rare case, I'm curious as to what will happen so I can take action and make sure all is good before instituting the policy.

Hello bpohlman
All flash disks are a big problem for all IT workers.
you can close USB devices and give exceptions Printers,keyboards, mouses etc.
Please watch this video It will be help to you.
https://www-secure.symantec.com/connect/videos/how-block-flash-disk-application-and-device-policy

Fatih,
Thanks for the response and link to the video.

I was able to add exceptions for non-USB drives (mice, keyboards, printers) I'm just curious now what will happen if a user sticks USB drive into the USB port on a printer? Will they somehow be able to get it to work on the PC the printer is attached to since the printer is now an exception? These cases would be very rare for me to deal with and I likely won't be able to test but was curious if anyone else came across something like this.

I understand you my friend you mean, you have got a printer and this printer have got usb ports.
if you block USB devices with USBSTOR you can use your printer but you can not use USB drive on your printer !
because all usb disk drives start USBSTOR. you can block all usb devices with this way wherever it plug in.
thanks
Fatih

That makes sense now after going thru the video. Thanks!

I know how you feeling now because i feel it before :)
Thanks
Fatih