Managing device control
Device control specifies what hardware devices are allowed or blocked on your client computers. You use the default hardware devices list and a Device Control policy to manage device control. You can also add your own.
Review the default hardware devices list in
Symantec Endpoint Protection Manager
Symantec Endpoint Protection Managerincludes a list of hardware devices. The list appears on the
Symantec Endpoint Protection Managerunder
Policy Components. You use this list to select the devices that you want to control on your client computers.
If you want to control a device that is not included in the list, you must add the device first. See:
Add devices to the hardware device list (if necessary)
When you add a device to the device list, you need a class ID or device ID for the device.
You cannot add a customized device for Mac. You can only use the device types that are provided. See:
Allow or block a device in the Device Control policy
Specify the devices that you want to allow or block from being accessed on the client. See:
For Mac clients, device control is part of SymDaemon service. You do not need to restart the Windows client or the Mac client for device control to work.