To create a policy for Advanced Device Control, follow these steps: Advance Device Control feature is not supported on Apple’s M1 chip.Ĭreating policy for Advanced Device Control.On Windows XP SP1 and prior operating systems, you will not be able to block devices other than USB storage devices.You can use the exception list to exclude the devices from the device control policy. Once the policy is applied to a group, the access rights are also applied. They can also customize access to admin configured devices. For example, administrators can block complete access to removable devices, give read-only and no write access so that nothing can be written on the external devices.

This feature allows the administrators to create policies with varying rights (device authentication capability). Unnecessary data or applications do not clog the systems.Autorun feature does not activate any infection.While working with data storage devices such as CD/DVDs and USB-based devices such as pen drives, organizations are concerned with the following:

Endpoint usb security