Can the Business Suite Device control allow executables to run on a specific device but block other removable storage devices?

Issue:

Can the Business Suite (Client Security or Server Security) Device control feature allow executables to be run on a specific device but block other removable storage devices?

Resolution:

Yes, the allow executables to run and allow write access rules for removable storage devices can be set on a per device level., so that on specific mass storage devices they are always allowed. 

Follow these steps:

1. Log in to the Policy Manager Console
2. Select a host or policy domain from the domain tree
3. Go to the Settings tab
4. Navigate to the Windows > Device Control settings page
5. In the Removable storage devices section, disable both:
   1. Allow write access 
   2. Allow executables to run
6. Click on the "Configure removable storage devices where execute and write permissions are allowed" button
7. Enter the HardwareID of the storage devices which you want to allow 
8. Click Close 
9. Distribute the policy (Ctrl + D)