I have a whitelist allowed USB devices configured on our system and it appeared to have been working well. We tested a number of unauthorized devices and they would get blocked as expected. Now however we have found two USB drives which get blocked on some machine but allowed on others?
When the drives are inserted they show up in LEM Monitor as being attached but the detach rule never triggers. We have nothing else set for USB devices so I don't understand why these devices work on some machine but DO get blocked on others?
Any ideas?
Thanks
Mike