3 Replies Latest reply on Jul 21, 2014 1:40 PM by vimalnavis

    How to treat USB HDD in Windows 8.x as it is detected as Portable Device

    bphang

      Hi everyone,

       

       

      I have in the past build a Device rules that works fine with Win7 environment.

      But since our company introduced Win8.1 to the fleet, looks like the rule is not working properly now

       

      So what I have are :

      - Removable Storage Protection Rules : which monitor all files written onto removable storage [ USB stick or USB HDD ]

      - Plug and Play Device Rules : which block Device Class : Windows Portable Devices

       

      The above combination works fine before as it blocks all attempt to connect phones onto machines [iPhone , Androids] and writing file to usb storage can be recorded.

       

      Then come Win8.1 which when a USB hdd or USB flash drive plugged to it, it will detect the device as Portable Devices.

      [for newer devices only , as my old Lacie 2GB is not treated as Portable device but my new 16GB is ]

       

      ie my Seagate FlexGo enumerated 2 devices when I plug it in onto a Win8.1

       

      SWD\WPDBUSENUM\{B54D092C-F832-11E3-825A-00249B026A41}#000000000000xxxx

      USBSTOR\DISK&VEN_SEAGATE&PROD_FREEAGENT_GOFLEX&REV__210\NA0Exxxx&0

       

      And since I have a block of WPD , looks like my RSPR rule is not working anymore.

       

      Just wondering how you construst the protection rules to accomodate win8.1 ?

       

      Thank you