This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Device Control: Allow Special USB Drives

Dear Community,

we have a few USB Drives with a Special PID (Produkt ID) eg: USB\VID_0815&PID1234 (this is the "Hardware-ID" from Windows Device Manager). I want to whitelist the sticks with this PID in DeviceControl, but unfortunately Device Control only shows the "Device ID" and "Model-ID" that does not contain the PID.

Is there any way that you can select these USB sticks based on the PID?

This thread was automatically locked due to age.

0 QC over 6 years ago

Hello MatthiasSchwarzer,

you say the Model ID presented in the Event Viewer is not suitable to exempt the devices in question? Please note that for removable storage Device Control considers the Hardware ID for the Disk drive, not the USB device.

Christian
Cancel
Vote Up 0 Vote Down

Cancel
0 MatthiasSchwarzer over 6 years ago in reply to QC

Dear Christian,

you´re right. The PID is only Show on the USB Device, not on the Disk Drive Information.

Have we any chance to change this?
Cancel
Vote Up 0 Vote Down

Cancel
0 QC over 6 years ago in reply to MatthiasSchwarzer

Hello MatthiasSchwarzer,

any chance to change this?
I'm not Sophos but I don't think so. It's the use of the USB device as disk that causes Device Control to interfere and thus it present the "offending" device.
It's not clear (to me) why you need to exempt based on the PID - do the devices appear with different Model IDs in Device Control?

Christian
Cancel
Vote Up 0 Vote Down

Cancel
0 MatthiasSchwarzer over 6 years ago in reply to QC

QC said:

- do the devices appear with different Model IDs in Device Control?

Yes, we have USB Devices with custom PID, so the idea is, to exclude all other USB devices and only allow our Custom PID´s
Cancel
Vote Up 0 Vote Down

Cancel
0 QC over 6 years ago in reply to MatthiasSchwarzer

Hello MatthiasSchwarzer,

Devices with custom PID
I see. You could suggest it on the Ideas forum or vote for an existing idea. Right now it's not possible and adding this would require quite some implementation effort. As the Overview article states DevCtrl is port agnostic - consulting Windows Device Manager shows that it's the disk device that is disabled, not the underlying USB device. So apparently DevCtrl doesn't "dig deeper" when it encounters a potentially controlled device.

Christian
Cancel
Vote Up 0 Vote Down

Cancel