Average Tech

To block access to USB Drives via Symantec Endpoint without blocking access to other USB devices such as a keyboard and Mouse follow these steps;





Under Policy Components choose Hardware devices and add a new device
Select Device ID and enter USBSTOR*





Now create a new Application and Device Control Policy
Drill down to Device Control > Blocked Devices, choose add and select the device you just created

Under excluded you can any device you which, for example adding the entire device ID of a USB thumb drive will allow that drive to bypass the block you just created while still blocking all other USB drives