I’m setting up Hexnode for Windows PCs and want to block users from connecting any USB or external device unless I explicitly allow it. Some of the allowed devices may be USB drives, Android phones, or iOS devices.
Do I need to enroll the Windows device first, then add the allowed device ID under Media Management and assign the policy to the user/device? Also, does the same kind of USB whitelisting work on macOS? I also need to restrict Wi-Fi and Bluetooth changes on Macs.
12 Views
Yes, the Windows devices must be enrolled in Hexnode before the restriction can be applied.
For Windows USB whitelisting, configure it from:
Policies > Windows > Security > Media Management
Recommended setup:
1. Disable Allow use of all external media. This blocks external media by default on the targeted Windows devices.
2. Enable Allow use of specific external media.
3. Under Specify device ID, add the Hardware ID or Device Instance ID of the USB devices you want to allow.
4. Save the policy and associate it with the required users, devices, user groups, or device groups.
With this configuration, unauthorized USB storage devices are blocked, while only the specified devices are allowed.
Regards,
Mary Romero
Don't have an account? Sign up
What's new 
