Support articles

Find clear, step-by-step solutions to common WithSecure issues across installation, configuration, updates, and product performance.

How to block all USB mass storage devices with Device Control feature?

Issue:

How to block all USB mass storage devices (USB flash drive / stick) with the Device Control feature?

Resolution:

To block all USB Mass Storage Devices with the Elements Endpoint Protection Device Control feature:

  1. Log in to the Elements Security Center portal
  2. Navigate to the Security configurations > profiles page
  3. Open the profile that is in use on the devices
  4. Go to the Device control settings page
  5. In the Device access rules section, change the Access to device value for USB Mass Storage devices from Allow to Block
  6. Click Save profile

To Block all USB Mass Storage Devices with the Client Security or Server Security Device Control feature via a Policy Manager policy:

  1. Log in to the Policy Manager Console
  2. Select a host or policy domain from the domain tree
  3. Open the Settings tab
  4. Navigate to Windows > Device control
  5. In the Device access rules table, change the Access level for USB Mass Storage Devices from Full access to Blocked 
  6. Distribute the policy (Ctrl + D)