Endpoint Protection

Hello.

I'd like to be able to block the services/the device exe'.s that Apple's device rely on so far, i've found the following.

mDNSResponder
Bonjour Service


any others i can restrict from running that will prevent the device from being connected to be charged?

Thanks, i was considering a GPO, but would like less GPO, and more SEPM help

http://www.symantec.com/connect/forums/block-iphone-not-its-charge

Thanks, will use the dev viewer and add this to the decice control list.

You said you want to block users from charging their iPhone via USB.   Is that even possible?    We disable USB in the BIOS on 99% of our machines, yet they still allow charging.     We have people plug in iPhones, MP3 Players, etc for charging even with USB disabled at the BIOS level.

As PrimeInc replied , the BIOS settings doesn't have effect on hardware side,so that USB devices will be charged without any problem.

Well, if i get the device id for an iPad or iPhone, and use it to force SEP to block the device, surely it won't charge, or i can also use SEP to prevent the iPodService.exe from running?

blocking by device ID seems to be a good option.

Thanks for all your replies, i'm going to test today with my own ipad & iphone & post the results.

(had an air con failure today eek, so priorties first )