Reference Guide

Manage Policies
Windows Port Control
This technology allows for control of all the physical ports on a Windows computer
(disable/enable/bypass), and can be customized by port type.
Windows Port Control Disabled
Enable or Disable all Port Control
System policies. If this policy is
set to Disable, no Port Control
System policies are applied,
regardless of other Port Control
System policies.
All
PCS policies require a reboot
before the policy takes effect.
Port: Express Card Slot Enabled
Enable, Disable, or Bypass ports
exposed through the Express Card
Slot.
Port: USB Enabled
Enable, Disable, or Bypass port
access to external USB ports.
USB port
-level blocking and HID
class
-level blocking is only honored
if we can identify the computer
chassis as a laptop/notebook form
-
factor. We rely on the computer's
BIOS for the identification of the
chassis.
Port: eSATA Enabled
Enable, Disable, or Bypass port
acc
ess to external SATA ports.
Class: Storage Enabled
PARENT to the next 3 policies. Set
this policy to Enabled to use the
next 3 Subclass Storage polices.
Setting this policy to Disabled
disables all 3 Subclass Storage
policies
- no matter what their
value.
See advanced settings
Windows Device Control
This technology allows for control of all the devices on a Windows computer (disable/enable), and can
be customized by device type.
Class: Windows Portable Device (WPD) Enabled
PARENT to the next policy. Set this
policy to Enabled to use the Subclass
Windows Portable Device (WPD):
Storage policy. Setting this policy
to Disabled disables the Subclass
Windows Portable Device (WPD):
Storage policy
- no matter what its
value.
Control access to all
Windows
Portable Devices.
Subclass Windows Portable Device
(WPD): Storage
Full Access
CHILD of Class: Windows Portable
Device (WPD) . Class: Windows
Portable Device (WPD) must be set to
Enabled to use this
policy.
Full Access: Port does not have
read/write data restrictions applied.
Read Only: Allows read capability.
Write data is disabled.
Blocked: Port is blocked from
read/write capability.
Class: Human Interface Device (HID) Enabled
Control access to all Human
Interface Devices (keyboards, mice).
264