Detect and block devices

If you use role-based administration:

For more information, see Managing roles and sub-estates.

  1. Check which device control policy is used by the group(s) of computers you want to configure.
  2. In the Policies pane, double-click Device control. Then double-click the policy you want to change.
  3. In the Device control policy dialog box, on the Configuration tab, select the Enable device control scanning check box.
  4. Clear the Detect but do not block devices check box.
  5. If you haven’t done so already, change the status of devices you want to block to “Blocked.” (For details, see Select device types to control.)
    Click OK.