I need to be able to export the details of each device control policy. ex. Groups Floppy Drive Optical Drive Removable Storage Secure Removable Storage DeviceControlPolicy1 Full Access Full Access Blocked Blocked DeviceControlPolicy2 Blocked Blocked Read Only Blocked Is there a way to do this instead of manually double clicking each?

Hi fjordz, In you enterprise console menu, if you locate the Events and then Device Control Events , there you can specify the period to search for the events and then you can Export the report. Hope this helps

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Exporting details of DeviceControlPolicy

fjordz over 8 years ago

I need to be able to export the details of each device control policy.

ex.

Groups	Floppy Drive	Optical Drive	Removable Storage	Secure Removable Storage
DeviceControlPolicy1	Full Access	Full Access	Blocked	Blocked
DeviceControlPolicy2	Blocked	Blocked	Read Only	Blocked

Is there a way to do this instead of manually double clicking each?

This thread was automatically locked due to age.

Parents

+1 Bijou over 8 years ago

Hi fjordz,

In you enterprise console menu, if you locate the Events and then Device Control Events , there you can specify the period to search for the events and then you can Export the report.

Hope this helps
Cancel
Vote Up 0 Vote Down

Cancel
0 Radim Rybnikar over 5 years ago in reply to Bijou

Hi all,

I need similar statistics export - I need export report of exempted devices!

Your method only shows blocked devices. But I want to do a report of usage of exempted devices ... do you know how?

Thanks a lot ;-)
Cancel
Vote Up 0 Vote Down

Cancel
0 QC over 5 years ago in reply to Radim Rybnikar

Hello Radim Rybnikar,

AFAIK this is not possible. An endpoint reports blocked or potentially (because of the policy-global detect but do not block setting) blocked devices - not exempted devices. Even when a device is set to read only no event is sent.

Christian
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 QC over 5 years ago in reply to Radim Rybnikar

Hello Radim Rybnikar,

AFAIK this is not possible. An endpoint reports blocked or potentially (because of the policy-global detect but do not block setting) blocked devices - not exempted devices. Even when a device is set to read only no event is sent.

Christian
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data