Views:
  1. Navigate to Agents > Agent Management.
  2. In the agent tree, click the root domain icon () to include all agents or select specific domains or agents.
  3. Click Settings > Device Control Settings.
  4. Click the External Agents tab to configure settings for external agents or the Internal Agents tab to configure settings for internal agents.
  5. Select Enable Device Control.
  6. Apply settings as follows:

    • If you are on the External Agents tab, you can apply settings to internal agents by selecting Apply all settings to internal agents.

    • If you are on the Internal Agents tab, you can apply settings to external agents by selecting Apply all settings to external agents.

    A confirmation message appears. Allow some time for the deployment command to propagate to all agents.

  7. Choose to allow or block the AutoRun function (autorun.inf) on USB storage devices.
  8. Configure settings for storage devices.
    1. Select a permission for each storage device.

      For details about permissions, see Permissions for Storage Devices.

    2. If the permission for USB storage devices is Block, configure a list of approved devices. Users can access these devices and you can control the level of access using permissions.

      See Configuring an Approved List of USB Devices.

  9. For each non-storage device, select Allow or Block.
  10. If you selected domain(s) or agent(s) in the agent tree, click Save. If you clicked the root domain icon, choose from the following options:

    • Apply to All Agents: Applies settings to all existing agents and to any new agent added to an existing/future domain. Future domains are domains not yet created at the time you configured the settings.

    • Apply to Future Domains Only: Applies settings only to agents added to future domains. This option will not apply settings to new agents added to an existing domain.

Parent topic: Using Device Control