Blocking Access to Smartphones Using Device Control

Applies to LANDesk Management Suite 9.0 and above.

Description

When using device control to block access to storage volumes, some android and apple smartphones are still accessible. The reason this occurs is that the device class specified by the hardware manufacturer is defined as something other than as a storage volume so it is not blocked by the device control storage volume settings.

Resolution

Determine the device class of the hardware in question and modify your device control setting to add an exception that will block the device classusing the following steps:

1. Determine the device class for your device using the following steps:
   1. Connect the device to your machine and ensure it shows up under device manager.
   2. Right-click the device in device manager and select properties
   3. On the details tab select the device class property
   4. Make a note of this value.
      1. Note: The device class for most smartphones that have been reviewed is WPD
2. Modify the device control settings on the core to add an exception that will block the device:
   1. On the core open the device control settings
   2. Select the devices section of the settings
   3. On the exceptions tab click add to add an exception
   4. Enter a description for the exception
   5. On the parameter drop down select class
   6. For value enter the value for the device class that you determined in step 1.
      1. Note: The device class for most smartphones that have been reviewed is WPD.
   7. Ensure that the option to block the device is selected.
   8. Click Ok to save the device control settings
   9. From the agent settings screen, create an “install/update security component” task to update the appropriate client devices with the new device control setting.