Currently using SEP 11 RU7 MP2. Investigating for the first time using application and device control. My ultimate goal is to be able to block only USB thumb drives but allow all other forms of USB devices, such as mice, printers, GPS, cameras, external hard drives, SD cards, etc.
Through this article here, I was able to block all USB storage media, but since thumb drives, external hard drives, SD cards, camera's, etc., all use the same GUID, all storage devices get blocked. This policy does allow mice, printers, etc, to work, though
What I'd like to know: is it possible to block only thumb drives and allow other similar storage devices without getting into allowing individual devices, which in our environment of over 15,000 users would be beyond time consuming.