Reference Guide

Security Management Server - AdminHelp v9.8
281
Windows Port Control
This technology allows for control of all the physical ports on a Windows computer (disable/enable/bypass),
and can be customized by port type.
Port Control System
Disabled
Enable or Disable all Port Control
System
policies. If this policy is set to Disable, no
Port Control System policies are applied,
regardless of other Port Control System
policies.
All
PCS policies require a reboot before the
policy takes effect.
Port: Express Card Slot
Enabled
Enable, Di
sable, or Bypass ports exposed
through the Express Card Slot.
Port: USB
Enabled
Enable, Disable, or Bypass port access to
external USB ports.
Note:
USB port-level blocking and HID class-
level blocking is
only honored if we can
identify the computer chassi
s as a
laptop/notebook form
-factor. We rely on the
computer's BIOS for the identification of the
chassis.
Port: eSATA
Enabled
Enable, Disable, or Bypass port access to
external SATA ports.
See advanced settings
Windows Device Control
This technology allows for control of all the devices on a Windows computer (disable/enable), and can be
customized by device type.
Class: Storage
Enabled
PARENT to the next 3 policies. Set this policy
to Enabled to use the next 3 Subclass Storage
polices. Setting this policy to Disabled
disables all 3 Subclass Storage policies
- no
matter what their value.
Class: Windows Portable Device (WPD)
Enabled
PARENT to the next policy. Set this policy to
Enabled to use
the Subclass Windows
Portable Device (WPD): Storage policy.
Setting this policy to Disabled disables the
Subclass Windows Portable Device (WPD):
Storage policy
- no matter what its value.
Control access to all
Windows Portable
Devices.
Subclass Windows Portable Device (WPD):
Storage
Full Access
CHILD of Class: Windows Portable Device
(WPD) . Class: Windows Portable Device
(WPD) must be set to Enabled to use this
policy.
Full Access: Port does not have read/write
data restrictions applied.
Read Only: Allows read capability. Write data
is disabled.
Blocked: Port is blocked from read/write
capability.
Class: Human Interface Device (HID)
Enabled
Control access to all
Human Interface
Devices (keyboards, mice).
Note:
USB port-level blocking and HID class-
level
blocking is only honored if we can
identify the computer chassis as a
laptop/notebook form
-factor. We rely on the
computer's BIOS for the identification of the
chassis.