Best Practice KES 11

[dkamp]

I would like to configure the KES 11 "Device Control" module but would like to use "Best Practice" or recommended methods so that I am not creating any issues. Can someone share screen shots of their settings or point me to a document. Specifically I want to control the USB ports on devices by limiting to an AD Group or User. But yet always allow some devices (Example had held scanner and Keyboard/mouse) for all users. Is there a Kaspersky service to assist us doing this? We are a MSA Plus customer.

[dkamp]

So nobody uses Device Control? I assumed Kaspersky support would have at least attempted to answer :zipper_mouth:

[Konstantin Antonov]

Hi, Sorry for the late response. Unfortunately we don't have best practices for the Device Control component, but you can read all required info about them here - https://help.kaspersky.com/KESWin/11.1.1/en-US/34890.htm If you will have any errors or problems we ready to help you with them. Thank you!

[dkamp]

Can you give me a procedure to Block all USB memory unless you are a member of a specified AD Group? In Trusted devices, I see a large list of individual USB memory. What can I use to All USB Memory modules? Thank you!

[dkamp]

Since Kaspersky does not want to answer the question. What process does anyone else use to Block USB memory sticks from being used except for a few guys in the support staff?

[dkamp]

One Method I found.... Edit the Policy, go to Device Control, Select Removable drives, Select Edit, Add the AD Group that you want to allow access to Removable drives. Remove the Everyone Group, Add a Check in the Box for Default schedule. Still testing for actual results.