{"id":4696,"date":"2026-09-30T15:26:35","date_gmt":"2026-09-30T12:26:35","guid":{"rendered":"https:\/\/support.withsecure.com\/?post_type=support_article&p=4696"},"modified":"2026-09-30T15:26:35","modified_gmt":"2026-09-30T12:26:35","slug":"can-the-business-suite-device-control-allow-executables-to-run-on-a-specific-device-but-block-other-removable-storage-devices","status":"publish","type":"support_article","link":"https:\/\/support.withsecure.com\/jp-ja\/support-articles\/can-the-business-suite-device-control-allow-executables-to-run-on-a-specific-device-but-block-other-removable-storage-devices\/","title":{"rendered":"Can the Business Suite Device control allow executables to run on a specific device but block other removable storage devices?"},"content":{"rendered":"

Issue:<\/h3>\n

Can the Business Suite (Client Security or Server Security) Device control feature allow executables to be run on a specific device but block other removable storage devices?<\/p>\n

Resolution:<\/h3>\n

Yes, the allow executables to run<\/b>\u00a0and allow write access<\/b> rules for removable storage devices can be set on a per device level., so that on specific mass storage devices they are always allowed.\u00a0<\/p>\n

Follow these steps:<\/p>\n

    \n
  1. Log in to the Policy Manager Console<\/li>\n
  2. Select a host or policy domain from the domain tree<\/li>\n
  3. Go to the Settings<\/strong> tab<\/li>\n
  4. Navigate to the Windows > Device Control <\/strong>settings page<\/li>\n
  5. In the Removable storage devices <\/strong>section, disable both:\n
      \n
    1. Allow write access\u00a0<\/li>\n
    2. Allow executables to run<\/li>\n<\/ol>\n<\/li>\n
    3. Click on the "Configure removable storage devices where execute and write permissions are<\/strong> allowed" button<\/li>\n
    4. Enter the HardwareID of the storage devices which you want to allow\u00a0<\/li>\n
    5. Click Close\u00a0<\/strong><\/li>\n
    6. Distribute the policy (Ctrl + D)<\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"

      Can the Business Suite (Client Security or Server Security) Device control feature allow executables to be run on a specific device but block other removable storage devices?<\/p>\n","protected":false},"template":"","support_article_product":[106],"class_list":["post-4696","support_article","type-support_article","status-publish","hentry"],"acf":{"source_foreign_id":"000004599","source_version":1,"source_system":"salesforce","source_date_updated":"2026-09-30 12:26:35","import_hash":"cdd8872c6b4c239267a415f72315efad99c3f2c3","vanilla_article_id":"","vanilla_url":"","vanilla_kb_id":"","vanilla_category_id":"","machine_translated":false,"reactions_helpful_yes":"","reactions_helpful_no":""},"_links":{"self":[{"href":"https:\/\/support.withsecure.com\/jp-ja\/wp-json\/wp\/v2\/support_article\/4696","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/support.withsecure.com\/jp-ja\/wp-json\/wp\/v2\/support_article"}],"about":[{"href":"https:\/\/support.withsecure.com\/jp-ja\/wp-json\/wp\/v2\/types\/support_article"}],"wp:attachment":[{"href":"https:\/\/support.withsecure.com\/jp-ja\/wp-json\/wp\/v2\/media?parent=4696"}],"wp:term":[{"taxonomy":"support_article_product","embeddable":true,"href":"https:\/\/support.withsecure.com\/jp-ja\/wp-json\/wp\/v2\/support_article_product?post=4696"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}