USB connectivity policy not working on 1st connect of device

Hi,
I have an problem concerning my USB connectivity policy. My endpoint zone is blocking all USB devices. Users do have access for known USB devices (USB storage devices) I have put into another USB connectivity policy which is attached to the User objects. In general everything is working fine, unknown devices are blocked and registered devices are allowed.
But I have weird behavior when a new,unknown USB device is connected the very first time. Then Windows starts detecting it, installs the driver but does NOT deactivate them. The device is displayed and accessible through the Windows Explorer. It seems something is blocking the Endpoint agent from deactivating it. Windows Autoplay and Autorun Function already HAS BEEN disabled. No Antivirus is installed on that system.
The ZES log files contain many of these messages:
""USB-Massenspeichergert"(USB\VID_0781&PID_5151\0775131 B33009E3D) failed
[09.04.2012 10:45:19.692][14] Component: Always: ZES Component Manager: Reboot Requested by: Device Watcher (Suppressed)"
Same behavior i had when Autoplay was still active: Once the Windows Autoplay did automatically open a folder or file on a new stick, the Endpoint agent was unable to deactivate the device. This seems not to be a very reliable method to block devices...!
When I disconnect and insert the device again, everything is fine (blocked). Problem only appears on very first use of a device!
My questions:
Can I somehow prevent that Windows displays new devices in the Windows Explorer before they are blocked? I would prefer that they FIRST are evaluated and THEN will be accessible for the User?
Is there another place in ZCC (except by adding USB connectivity policies to the zone) forcing the endpoint agent to block devices?

What version are you using? If you're not using the latest 11.2.1 MU1, then please upgrade.
For autoplay, you can block this with a policy setting as well (disable autorun and/or autoplay).

Similar Messages

Why does iTunes keep giving me bogus error messages. "Your internet connection is not working, check your connection and try again." My internet is working fine. iTunes is not working and will not allow me to download tunes.

why does iTunes keep giving me bogus error messages. "Your internet connection is not working, check your connection and try again." My internet is working fine. iTunes is not working and will not allow me to download tunes.

This my sound too simple, but I just kept clikning on the arrow next to the selected music and it finally "Kicked" in.
I live in Europe ,So Be persistent and don't give up ! Aug. 2013

E3200 - USB port does NOT work for more than one device

We needed a new router that had the dual band connectivity as our previous router stopped working properly when we started using a baby monitor operating on the same 2.4 GHz. The choice was between E3200 and E2500. We chose the E3200 mainly because it also offered a USB port. We were hoping to use that to connect our printer and two external drives (thus bypassing our old desktop that's been working as a server). However, it turns out that the USB port on E3200 does NOT support USB hubs! So, you can ONLY use ONE device - either a printer or one external storage drive. That wasn't really clear at all from the description. I feel like we wasted the extra $50 hoping to get functionality that just isn't there. Can't believe that in this day and age, Cisco thinks we all have only ONE USB device we might want to connect to the network! The router itself is fast enough, but the extra $50 for a USB port that doesn't do much and some speedboost phantom ability is just not worth it.

Just to save time to you all, after numerous attempts to install a USB hub to my E3200,
I wrote to Cisco Customer Service (live chat) and I specifically requested how to set up the usb hub or the virtual USB port and they said that they do not have a software to install a USB hub.
Hope this help
Massimo
(Mod note: Edited for guideline compliance.)

My external hard disk ( TRANSCEND ) is not working when i connect to usb..before it was working..

my external hard disk ( TRANSCEND ) is not working when i connect to usb..before it was working.

1. These are the iphone forums. So what does your question have to do with iPhones?
2. Contact Transcend for support.

Bug (?) with Corporate Connectivity is (not) Working check

Noticed something odd. In situations where:
Direct Access client is offsite
their Internet access is via WiFi
they first have to enter their access credentials through a web-based captive portal before access is granted
then the Corporate Connectivity Check process malfunctions. Have seen cases where, after accessing the captive portal and being authenticated, Internet access works on the client. Direct Access then connects successfully. This is confirmed
on the server console, showing the client connected and the user credentials used. The client is able to access internal resources just fine (e.g. network drives on file servers).
But on the client itself, it still says Corporate Connectivity is Not Working. The WiFi icon is showing an exclamation mark. My belief is that this is caused by the client's inability to access Microsoft NCSI servers in a timely fashion.
So it looks like the corporate connectivity checks are dependent on Microsoft NCSI checks.
Can someone at Microsoft please look into this, as it is confusing our users (not to mention us guys in IT who have only just discovered this odd behaviour!).

Hi Steven !
Thanks a lot for your guidance !
After I followed the steps, I found that the time out occurs when trying to resolve the internal domain name.
The Windows Firewall was enabled on all profiles ( active on the public )
There were no IPsec sessions established in the Security associations tab, so I enabled the audit policy of the IPsec as per your instructions.
There is reoccurring error in the Security log :
Date:          10/8/2014 10:08:49 AM
Event ID:      4653
Task Category: IPsec Main Mode
Level:         Information
Keywords:      Audit Failure
User:          N/A
Computer:      MyW8Client
Description:
An IPsec main mode negotiation failed.
Local Endpoint:
Local Principal Name: -
Network Address: MyW8Client_Ipv6 address
Keying Module Port: 500
Remote Endpoint:
Principal Name:  -
Network Address: MY_DA_Servert Ipv6 address
Keying Module Port: 500
Additional Information:
Keying Module Name: AuthIP
Authentication Method: Unknown authentication
Role:   Initiator
Impersonation State: Not enabled
Main Mode Filter ID: 180987
Failure Information:
Failure Point:  Local computer
Failure Reason:  Negotiation timed out
State:   Sent first (SA) payload
Initiator Cookie:  9e636863e513b367
Responder Cookie: 0000000000000000
As far as I understand - the connection can not be established due to certificate error, which in my case is strange since my DA configuration is set to not use computer certificates, only Kerberos.
I will keep digging but any additional tip/advice will be appreciated!
Thanks again, Steven!
P.S. Just noticed that the Event ID 4653 produce two types of "Failure Reason" - apart from "Negotiation timed out" I also get "No policy configured"

Ports not working on TBD connected with iMac

I have a 27 inch Thunderbolt display connected with a 27 inch iMac. All the port (USB, Firewire) were working on the TBD. Then a software update of TBD came and since then none of the ports (USB, Firewire) are not working anymore on the TBD.
Before I could adjust brightness on the TBD, now I can't even do that.
Anyone facing the same problem

Hi Danny
Using what adapter(s) and cable(s).....?
Check the TVs owners manual or LGs support site, there maybe a way to reset the HDMI ports if they were tripped or overloaded by a bad cable or connection.
Dennis

I phnoe4s not working. when i connect to charger apple logo keeps blinking

my i phnoe4s not working. when i connect to charger apple logo keeps blinking

Hello abuwafi,
The troubleshooting steps detailed below can help get your iPhone back into working order.
If your battery doesn't charge, or if your device shows a low-battery image, black screen, or "accessory not supported" alert, follow these steps.
Inspect the connector at the bottom of the phone:
Make sure that there are no bent pins in the connector.
Make sure that the connector is free from debris.
If there are bent pins or debris, please contact Apple Support.
Otherwise, continue troubleshooting.
Make sure that the outlet you're using works.
Make sure that the Apple USB cable and Apple USB power adapter work.
Plug the device in to power and let it charge until your device turns on. This could take between 10 and 30 minutes. If you don't have an Apple USB power adapter, try connecting to a computer's high-power USB 2.0 port (not a keyboard). The computer must be on.
If the device still exhibits an issue, try turning your device off and then on again while connected to power.
If the issue persists, please contact Apple Support.
iPhone and iPod touch: Charging the battery
http://support.apple.com/kb/HT1476
Cheers,
Allen

HT201413 Device does not work when I connect it to your computer to the iTunes program update requests and then gives me an error No. 21

Device does not work when I connect it to your computer to the iTunes program update requests and then gives me an error No. 21

Device does not work when I connect it to my computer to the iTunes program update requests and then gives me an error No. 21

My 3G connection is not working after updating to iOS 6.1. I have tried all possible solutions like resetting the network, restarting the iPad

My 3G connection is not working after updating to iOS 6.1. I have tried all possible solutions like resetting the network , restarting iPad , ...

The same story. No 3G after updating to 6.1. Told my daughter temporarily not to do an update on her iPad with 6.01. We've exchanged SIMs. I inserted her SIM in my iPad - 3G appeared immediately. And my SIM in her iPad with ios 6.01 also WORKS FINE. We use the same provider - Megafon Moscow. After attempting to revert SIMs to original configuration, 3G disappeared on my iPad again. Don't know what's going on with SIM during the update to 6.1

Since the last update to iTunes 11.0.3 (42) the airplay connection is not working properly , keeping breaking up

since the last update to iTunes 11.0.3 (42) the airplay connection is not working properly , keeping breaking up, while the airplay works fine with my iPad and iPhone. Anyone has experienced the same? any fix available?

Hi Erdelestre,
Thanks for visiting Apple Support Communities!
See this article for some tips about troubleshooting AirPlay:
Troubleshooting AirPlay and AirPlay Mirroring
http://support.apple.com/kb/ts4215
Troubleshooting performance issues with AirPlay or AirPlay Mirroring
If you are experiencing intermittent playback or significant network lag with AirPlay or AirPlay Mirroring, it could be due to a weak Wi-Fi connection, interference, or the distance between the Wi-Fi router and your iOS device, Apple TV or AirPort Express. Try the following suggestions:
Ensure that other devices are not trying to stream to the same Apple TV at the same time.
Turn off Bluetooth on your iOS device by tapping Settings > General > Bluetooth.
Ensure that your Wi-Fi router is set up with the recommended settings for the best performance.
Certain external devices, such as microwave ovens and baby monitors, may interfere with a Wi-Fi network. Try moving or disabling these devices.
If possible, try to locate your Wi-Fi router in the same room as your Apple TV and iPhone/iPad.
If your wireless and wired networks are the same, try connecting your Apple TV to the router via Ethernet instead of Wi-Fi.
If the Wi-Fi router has an external antenna, check to see that is it connected properly and in good condition.
Use the Wi-Fi network troubleshooting guide to resolve interference and other issues.
Best,
Jeremy

When I connect my ipod touch tomy computer it says that the device will not work because the Apple mobile device hasnt been activated?

Why does a meesage pop up when I connect my iPod touch saying that the device will not work because the Apple mobile device hasn't been activated?

Refer to this article to restart AMDS:
How to restart the Apple Mobile Device Service (AMDS) on Windows
http://support.apple.com/kb/TS1567

I baught Seagate Backup plus 2T hard drive to use as my Backup time machine. But its not working when i connect to time machine its not coping files, it keep saying preparing files. Can someone help me please...

i baught Seagate Backup plus 2T hard drive to use as my Backup time machine. But its not working. when i connect to time machine its not coping files, it keep saying preparing files. Can someone help me please...

Please read this whole message before doing anything.
This procedure is a diagnostic test. It’s unlikely to solve your problem. Don’t be disappointed when you find that nothing has changed after you complete it.
The purpose of the test is to determine whether the problem is caused by third-party software that loads automatically at startup or login, by a peripheral device, by a font conflict, or by corruption of the file system or of certain system caches.
Disconnect all wired peripherals except those needed for the test, and remove all aftermarket expansion cards, if applicable. Start up in safe mode and log in to the account with the problem. You must hold down the shift key twice: once when you turn on the computer, and again when you log in.
Note: If FileVault is enabled, or if a firmware password is set, or if the startup volume is a Fusion Drive or a software RAID, you can’t do this. Ask for further instructions.
Safe mode is much slower to start up and run than normal, with limited graphics performance, and some things won’t work at all, including sound output and Wi-Fi on certain models. The next normal startup may also be somewhat slow.
The login screen appears even if you usually login automatically. You must know your login password in order to log in. If you’ve forgotten the password, you will need to reset it before you begin.
Test while in safe mode. Same problem?
After testing, restart as usual (not in safe mode) and verify that you still have the problem. Post the results of the test.

I ipod classic 80 gb when I am connected pc connected after that is hanged just showing connected its not working any button

I ipod classic 80 gb when I am connected pc connected after that is hanged just showing connected its not working any button .

Try connecting it to another PC, if it is ok, then your PC has some software conflict with iTunes.
If it hangs other PC also, then your iPod Hardisk, maybe bad.
Do the disk diagnosticas posted earlier by tt2, to check the health of your Hardisk.
Have a nice day!

TS3367 Hi, the FaceTime just did not work between my mom and I. It used to work weeks ago, but now it does not work after showing"connecting". I feel frustrated and try all the method I can think of. Still do not work. Hope u can help me. Thanks!

Hi, the FaceTime just did not work between my mom and I. It used to work weeks ago, but now it does not work after showing"connecting". I feel frustrated and try all the method I can think of. Still do not work. Hope u can help me. Thanks!

Was it just this one time? Could be that you, or your mom, were experiencing network problems. Try again at a later time.

Why does my camera connection kit not work with my ipad 1 after updating on ios 5?

Why does my camera connection kit not work with my ipad 1 after updating on ios 5? What can I do to make it work again?

It should. It will only respond if there's something on the card for it to respond to, so do you have pics on the card?
And if it's messing up; try giving the iPad a restart. Hold down the sleep and home keys, past when you see hte red power down slider and until you see the silver apple. Let it reboot and try again. That can clear up any glitches on the device itself.

USB connectivity policy not working on 1st connect of device

Similar Messages

Maybe you are looking for