Skip to main content

USB Media Control Profile

Utilize this section to set up your device's permissions for allowing or blocking the installation of USB media devices. This feature provides comprehensive control over the access and management of USB media installations on your device.

To enforce USB Media Control Policy on the enrolled device(s), follow these steps:

  1. Navigate to SureMDM Web Console > Profiles > Windows > Add > USB Media Control > Configure.
  2. Enter a Profile Name.
  3. Configure the following USB Media Control Policy settings and click Save:

Allow Installation of Devices by Device Class IDs:

  • Audio Devices: Select this option if the device falls under the “Audio Devices (01h)” class.
  • Mouse/Keyboard: Select this option if the device falls under the “Audio Devices (03h)” class.
  • USB Printer: Select this option if the device falls under the “USB Printer (07h)” class.
  • USB Storage: Select this option if the device falls under the “USB Printer (08h)” class.
  • Smart Card: Select this option if the device falls under the “Smart Card (0Bh)” class.
  • Additional USB Device Class IDs: Enter the Device IDs of the USB device to allow installation. Refer usb.org (select all that apply).

Allow Installation of Devices by Device Instance IDs:

  • Device Instance IDs: Enter the Device Instance ID of the USB device to allow for installation.

Prevent Installation of Devices by Device Class IDs:

  • Audio Devices: Select this option if the device falls under the “Audio Devices (01h)” class.
  • Mouse/Keyboard: Select this option if the device falls under the “Mouse/Keyboard (03h)” class.
  • USB Printer: Select this option if the device falls under the “USB Printer (07h)” class.
  • USB Storage: Select this option if the device falls under the “USB Storage (08h)” class.
  • Smart Card: Select this option if the device falls under the “Smart Card (0Bh)” class.
  • Additional USB Device Class IDs: Enter the Device IDs of the USB device to prevent installation. Refer usb.org (select all that apply).

Prevent Installation of Devices by Device Instance IDS:

  • Block all other devices not listed above: Selecting this checkbox will block all other USB devices that are not explicitly allowed or blocked by the setting above including existing devices.
note
  • Prevent Installation always takes precedence over Allow Installation for Device Class IDs selected above.
  1. Go back to the Home tab and select the Windows device(s) or group(s).
  2. Click Apply to launch the Apply Job/Profile To Device prompt.
  3. Select the profile under All Jobs/Profiles.
  4. Click Apply in the Apply/Profile To Device prompt.