Reference Guide

Manage Policies
266
System policies are applied,
regardless of other Port Control
System poli
cies.
All
PCS policies require a reboot
before the policy takes ef
fect.
Port: Express Card Slot Enabled
Enable, Disable, or Bypass ports
exposed through the Express Card
Slot.
Port: USB Enabled
Enable, Disable, or Bypass port
access to external USB ports.
USB port
-level blocking and HID
class
-level blocking is only honored
if we can
identify the computer
chassis as a laptop/notebook form
-
factor. We rely on the computer's
BIOS for the identif
ication of the
cha
ssis.
Port: eSATA Enabled
Enable, Disable, or Bypass port
access to external SATA ports.
Class: Storage Enabled
PARENT to the next 3 policies. Set
this policy to Enabled to use the
next 3 Subclass Storage polices.
Setting this policy to
Disabled
disables all 3 Subclass Storage
policies
- no matter what their
v
alue.
See advanced settings
Windows Device Control
This technology allows for control of all the devices on a Windows computer (disable/enable), and can
be customized by device type.
Class: Windows Portable Device (WPD) Enabled
PARENT to the next policy. Set this
policy to Enabled
to use the Subclass
Wi
ndows Portable Device (WPD):
Storage policy. Setting this policy
t
o Disabled disables the Subclass
Windows Portable Device (WPD):
Storage policy
- no matter what its
v
alue.
Control access to all
Windows
Portable
Devices.
Subclass Windows Portable Device
(WPD): Storage
Full Access
CHILD of Class: Windows Portable
Device
(WPD) . Class: Windows
Portable Device (WPD) must be set to
Enabled to use this policy.
Full Access: Port does not have
read/write data restrictio
ns applied.
Read Onl
y: Allows read capability.
Write data is disa
bled.
Blocked: Port is blocked from
read/wri
te capability.
Class: Human Interface Device (HID) Enabled
Control access to all Human
Interface Devices (keyboards, mice).
USB port
-level blocking and HID
class
-level blocking is only honored
if we can identify the computer
chassis as a laptop/notebook
form-
factor. We rely on the computer's
BIOS for the identification of the
cha
ssis.
See advanced settings