Controlling network and storage devices on Windows devices

To ensure the security of data on Windows devices, you can restrict the access of Windows device users to network and storage devices (such as to a CD/DVD drive, Bluetooth, hard drives, and removable drives).

The Device Control feature is available only if you activated Kaspersky Endpoint Security Cloud under a Kaspersky Endpoint Security Cloud Plus or Pro license.

To configure user access to network and storage devices on Windows devices:

1. Open Kaspersky Endpoint Security Cloud Management Console.
2. Select the Security management → Security profiles section.

   The Security profiles section contains a list of security profiles configured in Kaspersky Endpoint Security Cloud.

3. In the list, select the security profile for the devices on which you want to configure access to devices.
4. Click the link with the profile name to open the security profile properties window.

   The security profile properties window displays settings available for all devices.

5. In the Windows group, select the Management settings section.
6. Switch the toggle button to Device Control is enabled.
7. Click the Settings link below the Device Control is enabled toggle button.

   The Device Control settings page opens.

8. Click the Settings link below the Rules for blocking device categories section.

   The workspace displays a list of network and storage devices on Windows devices to which you can restrict access.

9. In the drop-down list in the Access column, select Block next to the category of network or storage devices to which you want to restrict access.
10. Click the Save button.

After the security profile is applied on Windows devices, Kaspersky Endpoint Security Cloud will restrict the use of network or storage devices in accordance with the defined settings. Devices to which access has been blocked will be unavailable for Windows device users.

Additionally, you can define a list of trusted network and storage devices.

Page top