see:

 

 

Best Practices for Deploying Symantec Endpoint Protection's Application and Device Control Policies

 

How to block USB devices while excluding mouse and keyboard?

 

How to block USB Thumb Drives and USB Hard Drives, but allow specific USB Drives in the Application and Device Control Policy in Symantec Endpoint Protection.

 

Known Limitations of ADC

In SEP 11, Application and Device Control functions only on 32-bit Operating Systems.  ADC is not possible on 64-bit computers.ADC cannot block burning to CD/DVD drives, though a may be possible.ADC cannot block files accessed via NetBIOS.ADC shares drivers with Network Threat Protection, SEP's firewall component.  ADC will only function if the NTP component is also installed