Device policy for USB - NT AUTHORITY\SYSTEM (Initiator)

[kasperskyfan]

I have latest KSC 14.2, and device policy for USB. 
Problem is when I allow user to use USB, I receive notification "Event "Operation with the device prohibited" has occurred on device", but for "User: NT AUTHORITY\SYSTEM (Initiator)". I have a lot of these notification.

Is this normal behavior and what is the best practice?

[Шанелька]

I am also interested in this problem.

Event Type: Device operation prohibited
Device category: Device
Device type/Tire type: Removable rims
Device ID: SCSI\DISK&**********PORTABLE_SSD_T5\8&********7&0&00******
Device VID/PID: DISK&VEN_SAMSUNG&PROD_PO
User: NT AUTHORITY\SYSTEM (Initiator)
Result\Decision: Deny
Result\Operation: Read

In this case, the external drive is fully accessible, you can create and delete folders and files.