Controlling the data via USB Storage Devices

In this example we will create an operational rule which controls the USB storage devices. That means we will define which storage units are allowed to connect to the network devices via USB and refusing all others. The rule will therefore have the following steps:

• Reset Device Management Rule to make all previous USB storage device rules invalid.
• Create Device Management Rule allowing the respective device.
• Create Device Management Rule forbidding all other USB storage devices.

1. Click Wizards > Operational Rule Creation .
    The Operational Rule Creation Wizard displays on the screen with its first window.

   Note:

   The left pane of the wizard window appears all available steps of this wizard.

2. Enter USB Storage Device Control (or any other desired name) into the Name box.
3. Leave all other parameters as they are, because neither packages will be distributed nor dependencies are required for this rule.
4. Click Next > to continue.
    The Steps window displays.
5. Select Add Step on top of the list box.
    The Select a Step pop-up windows appears.

6. Expand the item Windows Device Management and select step Reset Device Management Rule .

   A rule defining the management of a specify device class should always use the Reset Device Management Rule as its first step. This is to make sure there are no other rules that are already assigned or used and that might interfere with this new rule.

7. Click Add .
8. Leave all values as they are, because the USB Storage Devices is already preselected in the Class Type box.
9. Click OK to confirm and add this step to the list of Selected Objects.
10. Select step Create Device Management Rule.
11. Click Add .
     The Properties dialog box appears. The USB Storage Devices option is already preselected.
12. Check the box Enable. This will allow the usage of the defined USB storage.
13. In the Filter Type box select Exact Match.

14. Into the Filter box enter the exact name of the USB storage to allow.

    If the name is not correct, the storage will not be recognized when it is connected.

    If you are not sure about the exact name see Option (c) now to find out.

    To allow all USB keys of a specific manufacturer or type see Option (b) now.

15. Click OK to confirm and add this step to the list of Selected Objects.
16. Select step Create Device Management Rule again.
17. Click Add .
     The Properties dialog box appears. USB Storage Devices is already preselected.
18. Leave the Enable box clear unselected. This will prohibit the usage of all other USB storages.
19. In the Filter Type box select Pattern .
20. Into the Filter box enter the wildcard character asterisks (*).

21. Click OK to confirm and add this step.

    When creating a list of conditions always start with the most restrictive condition and work your way down to the most general. A step prohibiting or allowing „the rest" or „all others" should always be the last in the rule.

22. Click OK again to confirm the list of steps for the operational rule and close the window.
23. Click Finish to confirm the settings of the new operational rule.
     A confirmation window appears which allows you to directly continue with the Operational Rule Distribution Wizard.

24. Click Yes to continue directly with the distribution of the new rule.
     The Operational Rule Distribution Wizard displays on the screen.

    Note:

    The Name box is inaccessible because the operational rule to distribute is already preselected, that is, the one we just created.

25. Leave all options as they are and click Next> to continue.
26. Select Assign Device Group on top of the list box in the new window.
     The Assign to Device Group pop-up window appears.
27. Select the group All Devices.
28. Click OK to confirm and close the window.
     The device group will be added to the list window.
29. Click Finish to confirm all choices and launch the assignment and configuration process.
30. The last option provided by the wizard is to go directly to one of the objects, that is, the operational rule or the task, if one was created. for our example we will directly activate the rule and change to focus to it, therefore check the Go to Operational Rule box and click Yes, to directly activate the rule.
     The device group will be added to the table in the right pane with a status Activated.

To follow the assignment process select the ensuing All Devices subnode and follow the status in the right window pane for the group members.

Related topics