disable usb storage in symantec endpoint protection manager

If the Apply layered order of evaluation for Allow and Prevent device installation policies across all device match criteria policy setting is not enabled with this policy setting, then any other policy settings specifically preventing installation will take precedence. Prevent installation of devices that match any of these device instance IDs.Prevent installation of devices that match these device IDs.When this policy setting is enabled together with the Apply layered order of evaluation for Allow and Prevent device installation policies across all device match criteria policy setting, Windows is allowed to install or update any device whose Plug and Play hardware ID or compatible ID appears in the list you create, unless another policy setting at the same or higher layer in the hierarchy specifically prevents that installation, such as the following policy settings: This policy setting is intended to be used only when the Apply layered order of evaluation for Allow and Prevent device installation policies across all device match criteria policy setting is enabled. This policy setting allows you to specify a list of Plug and Play hardware IDs and compatible IDs for devices that Windows is allowed to install. Policies Allow installation of devices that match any of these Device IDs For example, a USB device is reported to be removable by the drivers for the USB hub to which the device is connected.įor more information, see Device Installation in Windows. A device is considered removable when the driver for the device to which it's connected indicates that the device is removable.

Removable device type: Some devices could be classified as a removable device.

The following device properties are supported by Device Installation support:

Privilegeĭeploy Device Installation on Windows 10, Windows 11 devices, Windows Server 2022. To find the difference between Device Installation and Removable storage access control, see Microsoft Defender for Endpoint Device Control Removable Storage Protection.

Disable usb storage in symantec endpoint protection manager