About access rules

A device access rule is a group of settings that determine how users can access devices that are installed or connected to the computer. These settings include access to a specific device, an access schedule, and read or write permissions. You cannot add a device that is outside of Device Control classification. Access to such devices is allowed for all users.

Device Access Rules

The group of settings for an access rule differs depending on the type of device (see the table below).

Access rule settings

Devices	Access control	Schedule for access to a device	Assignment of users and/or a group of users	Priority	Read/write permission
Hard drives
Removable drives (including USB flash drives)
Floppy disks
CD/DVD drives
Portable devices (MTP)
Local printers		–			–
Network printers		–			–
Modems		–	–	–	–
Tape devices		–	–	–	–
Multifunctional devices		–	–	–	–
Smart card readers		–	–	–	–
Windows CE USB ActiveSync devices		–	–	–	–
External network adapters		–	–	–	–
Bluetooth		–	–	–	–
Cameras and scanners		–	–	–	–

Access rules for Wi-Fi networks

A Wi-Fi network access rule determines whether the use of Wi-Fi networks is allowed (the status) or forbidden (the status). You can add a trusted Wi-Fi network (the status) to a rule. Use of a trusted Wi-Fi network is allowed without limitations. By default, a Wi-Fi network access rule allows access to any Wi-Fi network.

Connection bus access rules

Connection bus access rules determine whether the connection of devices is allowed (the status) or forbidden (the status). Rules that allow access to buses are created by default for all connection buses that are present in the classification of the Device Control component.

Keyboard and mouse cannot be locked using Device Control. If you prohibit access to the USB connection bus, the user will continue to work with a keyboard and mouse connected via USB. The BadUSB Attack Prevention component is designed to prevent infected USB devices imitating keyboards from connecting to the computer.

Page top