Endpoint Protection

 Well, i've searched for the info on the USB device blocking.  i have it working for our IT thumbdrive and disabled for all others.  BUT i can still read the info from the thumbdrive.  i can't write to it which is good.
any additional info would be great on this.

thanks

Follow this doc
How to block USB Thumb Drives and USB Hard Drives, but allow specific USB Drives in the Application and Device Control Policy in Symantec Endpoint Protection.
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008102008020548

Edit 

Make all removable drives read-only

highlight
Block writing to all files and folders applies to files and folders

Select Actions

Under Read Attempt
Select Block Access
Check Enable Logging

Under Write Attempt
Select Continue processing other rules.


Select "Assign the Policy"
Select the group to assign the edited policy to.
Press "Assign"

Would suggest to test this policy on a test group once before applying to Production systems.

Thanks, that was all i was missing!!

works great now on selected devices and yes, i did it in a test environment.