That means it would disable our Olympus dictation devices. That's an old trick well published on the web, however, the huge drawback is that it disables ALL USB storage - ALL. worth a look and looks similar to something I'm doing in one test group now. We have a specific brand and model for IT, I'd bet in 5 years no one will match that here.īekirdur has an idea. There's too many much cheaper sticks that are NOT encrypted, and that's the issue - the users here are lazy as all get out and won't deal with the hassle of an encrypted device, which is good for us - blocked! Besides, the chances of someone going out and buying the EXACT same ENCRYPTED usb stick that IT here uses are a million to 1. And you can get pretty granular as far as allowing specific devices. If we need an exception, I can move the computer to a different group, NO problem there. It's GOT to be done via machine, not user. RAXCO perfect disk gets so far then hangs due to our convaluted AD structure. I've also found most application that perport to synch with AD and use your AD structure - really can't do it that well. User mode is impossible in our environment - AD is a mess, it's been hijacked and rebuilt/reorganized to fit a specific in-house application and users are all over the place in dozens and dozens of containers, and not grouped logically the way I'd run security. Not secure or sound management, but SEP left me little choice, IMO. Things have settled now, but I'm totally paranoid about blocking USB generically and add one device at a time to blocking as I discover they are being used. Like once it got "block USB" in its head it would not let go. In this case, it blocked USB printing even though it was specifically in the exclusions, AND I excluded *USB\Print* or something like that, so no matter what, if it had the string "print" or "printer" in it, it should have been EXCLUDED from blocking. Let's just say the visit with the boss was tense. IT's like the policy was REALLY messed up and no matter what I excluded, no one in 40+ offices, over 300 people, no one could print to a USB printer anywhere. That solved all but a couple, and I had to keep moving them back and forth until they started working. I had to create a group that was wide open, excluded everything, blocked nothing, drag the computers into that group, refresh/update content, wait a few minutes, then move them back into their original group.
DISABLE SYMANTEC ENDPOINT PROTECTION ENABLE USB OFFLINE
What happened was every USB printer in the agency suddenly went offline and stayed! Didn't matter what I excluded, and I even took the "block USB" out of the policy, the printers simply stopped working all at once in every office, every location. I then blocked USB devices and also excluded HID, cameras, and so on. I put in the exclusion for USB printers - allow all printers and the class. We had a major major major issue a few weeks back.
0 kommentar(er)
