Best Practices for Deploying Symantec Endpoint Protection's Application and Device Control Policies
http://www.symantec.com/docs/TECH145973
How to block USB devices while excluding mouse and keyboard?
http://www.symantec.com/docs/TECH161779
How to block USB Thumb Drives and USB Hard Drives, but allow specific USB Drives in the Application and Device Control Policy in Symantec Endpoint Protection.
http://www.symantec.com/docs/TECH106304
Known Limitations of ADC
In SEP 11, Application and Device Control functions only on 32-bit Operating Systems. ADC is not possible on 64-bit computers. ADC cannot block burning to CD/DVD drives, though a workaround may be possible. ADC cannot block files accessed via NetBIOS. ADC shares drivers with Network Threat Protection, SEP's firewall component. ADC will only function if the NTP component is also installed
