Hi Everyone,
We have recently installed Eset Endpoint Security on about 50 workstations (a mix of Windows XP and Windows 7). So far, everything seems to be working well with one exception. We have noticed that the device control module will occasionally display as "not-functioning" on a few of the clients. The issue can be resolved by a simple reboot. Once the reboot is complete, the device control will display as "active". Eset will then begin blocking external USB drives as expected. Although I am rather new to this, I am fairly certain I have the device control feature set up correctly on the client machines (most of the time the device control feature is working as expected). I am hoping our issue is a result of a simple misconfiguration on the client side. We have not yet tried re-installing EES on the clients but can always do that if needed. Does anyone have any suggestions concerning a possible fix for this issue?
Here is some additional information:
-We are running Eset Remote Administrator on a central server (running Windows 2008 Server).
-All client settings are being enforced through policies created in ERA.
-All EES installations are protected by a password. Users are not able to modify any settings or disable the application.
-All client machines are connected to a domain. All users on the domain are members of the "domain users" group.
-The ERA server is also a member of the same domain.
-We have the device control module enabled in all of the Eset policies.
-All policies have a "USB Block" rule present under the device control configuration.
-This "USB Block" rule is set to block any removable storage devices. We have applied this rule to all users who are a member of the "domain users" group.
-We have confirmed that the "USB Block" rule functions normally most of the time. Its only when the client shows device control as not-functional that the rule stops working. Rebooting the client machine solves the issue temporarily.
-The ERA does not report any issues with the clients (its shows full protection present) even though the client machine is showing a problem with the device control when viewing the EES status window locally on the client.
-So far, we have only seen this issue on Windows XP machines. We have not run into a Windows 7 machine with this issue yet. That being said, only about 10% of the client machines are running Windows 7. The majority are XP. EDIT: We have now confirmed that the issue is affecting both Windows XP and Windows 7. The difference is the Windows 7 machines show the Device Control module as being active . However, it is not successfully blocking USB drives as requested. A reboot does fix this problem. It
Thank you for your help!