Exception from blocking usb rules

kostasb · 2020-10-16T11:07:43+00:00

There was an error rendering this rich post.

I'm using a software called cardpresso. It uses a usb dongle for the product's licence, in order for the software to work.

The problem is that, I would also like to block all usb drivers access to that pc.

Is there a way to block usb access , but have an exception for that software?

Find more posts tagged with

Accepted answers

JamesC

Hi Kostasb

Does disabling Application Control help the situation ?

I suggest to submit FSDiag to create a support case.

If you wish, you can create a ticket with FSDiag collected when the USB is connected (device stats collecting should be enabled), and note the device in question.

In Policy Manager Console, navigate to Settings - Advanced view - Device Control "Report installed devices"

JamesC

Hi Kostasb,

Yes, you can add exclusions of the USB hardware ID under 'Device Control'

The following informations could help you with this topic:

https://community.f-secure.com/business-suite-en/kb/articles/5637-getting-hardware-id-for-a-device

https://community.f-secure.com/common-business-en/kb/articles/5533-device-control-overview

https://msdn.microsoft.com/en-us/library/windows/hardware/ff538820(v=vs.85).aspx

Please note that some USB SD card readers may be recognized as USB memory stick and not as SD card.

In these cases, you must configure the rule for USB storage media.

All comments

kostasb

Thanks, i managed to find the compatible device ID, from:

Devices-> connected devices tab.

JamesC

Hi Kostasb

Does disabling Application Control help the situation ?

I suggest to submit FSDiag to create a support case.

If you wish, you can create a ticket with FSDiag collected when the USB is connected (device stats collecting should be enabled), and note the device in question.

In Policy Manager Console, navigate to Settings - Advanced view - Device Control "Report installed devices"

kostasb

I tried that, but it seems that "USB Mass Storage Device" rule superceeds all the other ones, regarding usb access.

I disables usb mass storage and allowed a specific usb device ID, and it didn't work.

JamesC

Hi Kostasb,

Yes, you can add exclusions of the USB hardware ID under 'Device Control'

The following informations could help you with this topic:

https://community.f-secure.com/business-suite-en/kb/articles/5637-getting-hardware-id-for-a-device

https://community.f-secure.com/common-business-en/kb/articles/5533-device-control-overview

https://msdn.microsoft.com/en-us/library/windows/hardware/ff538820(v=vs.85).aspx

Please note that some USB SD card readers may be recognized as USB memory stick and not as SD card.

In these cases, you must configure the rule for USB storage media.