I would like to configure the KES 11 "Device Control" module but would like to use "Best Practice" or recommended methods so that I am not creating any issues. Can someone share screen shots of their settings or point me to a document. Specifically I want to control the USB ports on devices by limiting to an AD Group or User. But yet always allow some devices (Example had held scanner and Keyboard/mouse) for all users. Is there a Kaspersky service to assist us doing this? We are a MSA Plus customer.

So nobody uses Device Control? I assumed Kaspersky support would have at least attempted to answer :zipper_mouth:

Hi, Sorry for the late response. Unfortunately we don't have best practices for the Device Control component, but you can read all required info about them here - https://help.kaspersky.com/KESWin/11.1.1/en-US/34890.htm If you will have any errors or problems we ready to help you with them. Thank you!

Can you give me a procedure to Block all USB memory unless you are a member of a specified AD Group? In Trusted devices, I see a large list of individual USB memory. What can I use to All USB Memory modules? Thank you!

Since Kaspersky does not want to answer the question. What process does anyone else use to Block USB memory sticks from being used except for a few guys in the support staff?

One Method I found.... Edit the Policy, go to Device Control, Select Removable drives, Select Edit, Add the AD Group that you want to allow access to Removable drives. Remove the Everyone Group, Add a Check in the Box for Default schedule. Still testing for actual results.