This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

iMac Device Control - USB exemptions not working

Hi all,

we have Endpoint Protection and enterprice console 5.3.1! We enabled device control and use exception policies for some usb devices. Most of our clients have Win 7 and are in Domain, which  is synchron with Active Directory.  Six Clients are iMacs with OS 10.11.1 El Capitan. They are not in our domain, so i created an own group in Sophos endpoint and gave the group an own policy. The problem now is => The policy is not in function. All USB Devices on the client are disabled and we immediately get an email

A device control event occurred on machine xxx-imac.local.
Use of controlled device type 'Removable Storage' has been disabled by the administrator.

We only have to ways: Open all devices with the standard policy, or DISABLE all devices with the "USB disable" policy. We can`t create exceptions. 
Do u have an idea ?
The exception Policy runs on Win7 clients without any problems



This thread was automatically locked due to age.
  • Hello TobiasK�llner (not sure what this �  should be),

    I've edited your subject to make it more specific.
    How did you add the exemptions? Guess the Model-/Device-IDs are platform specific - but you can easily check with (and create the necessary exemptions from) the Event Viewer: Take a device which should be blocked, plug it into a Windows machine and an iMac and note the details.

    Christian