External Device Control Settings for Mac OS Profile
- The external device control section lets you configure all matched external devices connected to the Mac can be blocked or allowed by partial name / ID.
- For example, you can block access to USB storage devices, human interface devices, Bluetooth devices, infrared devices, IDE ATA/ATAPI controllers.
- Endpoint Manager blocks access to devices connected through both serial and parallel ports
Configure External Device Control settings for Mac OS profile
- Click 'Configuration Templates' > 'Profiles' then click the name of the profile to which you want to add the section.
- Click 'Add Profile Section' > 'External Devices Control'
- Enable Device Control - Enable the external device control feature. This option blocks devices of a client computer from accessing, such as USB drives, Bluetooth devices, printers, and serial and parallel ports.This is useful if you want to configure external device control settings for a profile during its creation and enable it at a later time.
The 'External Devices Control' settings interface contains two tabs:
- Blocked Hardware Items - Define the list of types of external hardware items to be blocked at the endpoints
- Blocked Names - Specify the devices to which you want to block access
The 'Blocked Hardware Items' tab displays a list of types of hardware that are blocked as per the profile and allows you to add/remove new hardware types
|
Blocked Hardware Items – Column Descriptions |
|
|---|---|
|
Column Header |
Description |
|
Name |
The device type as per global hardware classification. |
| Hardware Type | The Computer hardware type lists the physical parts of a computer |
|
Hardware Class |
The Globally Unique Identifier (GUID) of the hardware class. |
Add hardware item to be blocked
- Click 'Edit' option > Click 'Add' at the top of the list
The 'Blocked Hardware Items' dialog appears with a list of device types.
- Select the hardware item to be added to the block list and click 'Ok'.
- Repeat the process to add more device types.
Remove a hardware item from the list
- Select the hardware item from the list and click 'Delete'
- Click 'Confirm' to remove the device type from the blocked list.
- 'Blocked Names' tab manages the list of devices to which you want to block access.
|
Exclusions - Column Descriptions |
|
|---|---|
|
Column Header |
Description |
|
Device Custom Name |
Displays the name of the device. |
To add a device to be blocked
- Click 'Add' at the top of the list
The 'Device Custom Name' dialog will appear.
- Enter a label for the device in the 'Device Custom Name' field
- Click 'Add'
The device will be added to the blocked name list and will be blocked access at the endpoint(s).
Remove a device from blocked name
- Select the device custom name and click 'Delete'
- Click 'Confirm' to remove the item from the list
- Click the 'Save' button save the 'External Devices Control' settings.