Do we have any planning in next version for user based policy. i.e currently if i need to block usb it is based on the computer and this is not a standard practise. can we apply user base policy in SEPM12?
Regards,
Dilip Patel
The better way is to set up all computers in "User Mode".
Administration Guide for Symantec Endpoint Protection and Symantec Network Access > Section 1. Basic Administrative Tasks > Setting up your organizational structure > Understanding users and computers & Managing Users and Computers
The policies are then set depending on the user that has logged into the machine
Check this thread
https://www-secure.symantec.com/connect/forums/sep-user-mode-can-you-explain-want-link-device-control-policy
https://www-secure.symantec.com/connect/forums/configuring-usb
https://www-secure.symantec.com/connect/forums/customizing-usb-storage-access-end-users-symantec-endpoint-protection
the existing version has the feature you looking for. you need to set user mode.
This feature already exists
You can have the clients in User mode or Computer mode.
Check this document for more Information.
http://www.symantec.com/business/support/index?page=content&id=HOWTO27008
Yes i agree above comments.
this feature already exits in sepm
Switching a client between user mode and computer mode
http://www.symantec.com/docs/HOWTO80734
About user mode and computer mode
http://www.symantec.com/docs/HOWTO27008
please consider below two points:
1. MY SEPM is not interagreted with AD
2. we dont wont to apply user based policy on all computer or group.
we dont wont to apply user based polcy on spacific group only.
1. MY SEPM is not integrated with AD
2. we don't wont to apply user based policy on all computer or group.
we do not wont to apply user based policy on specific group only.
http://www.symantec.com/business/support/index?page=content&id=HOWTO80732#v11094164
As far as I understand, blocking USB through group policy will be better in your scenario. Because even though it is possible keeping some clients under user mode and some other under computer mode, it is not advisable.
HI Dilip,
I hope your have received your answer ?
Please don't forget to mark your thread solved with whatever answer helped you : )