This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Get information on which systems have USB access enabled?

Hi Guys,

As of 5.5.1 there are no inbuilt reports for us to see which systems have usb access enabled and which systems usb access is blocked. Is it possible to do this using some third party tool like Splunk of some SIEM. Can someone guide me with some documentation for the same.



This thread was automatically locked due to age.
Parents
  • Hello Kandarp Desai1,

    first of all, USB access is likely a misnomer. There's no such thing as Port Control is SESC. USB happens to be the most common connection method, but neither does Device Control block or disable the USB ports nor is Removable Storage only blocked when connected via USB,

    A computer belongs to a group, a group has a device control policy assigned, a policy has certain settings (including potential exclusions). In addition a computer has to comply with the policy. The information is in the database but scattered over several (undocumented) tables. Could be done but requires some research - tools just spare you some coding.

    Christian

Reply
  • Hello Kandarp Desai1,

    first of all, USB access is likely a misnomer. There's no such thing as Port Control is SESC. USB happens to be the most common connection method, but neither does Device Control block or disable the USB ports nor is Removable Storage only blocked when connected via USB,

    A computer belongs to a group, a group has a device control policy assigned, a policy has certain settings (including potential exclusions). In addition a computer has to comply with the policy. The information is in the database but scattered over several (undocumented) tables. Could be done but requires some research - tools just spare you some coding.

    Christian

Children
No Data